Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/c3b1020a-5104-3a05-b95d-7ef8dd8d23aa.roa
File:                     c3b1020a-5104-3a05-b95d-7ef8dd8d23aa.roa (raw, json)
Hash identifier:          U/H4zDpugTKGlDumkpDYZz2C6zacScAp456OZ1V3xo8=
Subject key identifier:   2E:6A:77:E7:E0:CA:B8:9D:8A:D7:E0:5A:C5:27:1F:46:3F:C7:E4:12
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858476E0107B849E724081A086280
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/c3b1020a-5104-3a05-b95d-7ef8dd8d23aa.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     6461
IP address blocks:        67.159.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:07:b8:49:e7:24:08:1a:08:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=f2f7b8d7-f3f0-4071-9e96-27fabb919c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:79:18:87:3c:ca:18:c1:4d:c8:66:ae:26:
                    4a:92:ea:a1:38:a2:0e:5e:34:8a:64:3b:31:ab:40:
                    e0:b0:19:e3:85:5a:7a:51:e6:2d:93:61:6b:dd:fe:
                    3e:9e:0f:ce:7e:96:0b:11:55:02:82:c9:fb:65:8b:
                    15:00:6f:2e:c9:41:cf:a8:12:34:1c:3f:3f:1e:3f:
                    14:74:10:1c:8c:98:ed:09:02:33:e1:f3:fd:fc:1e:
                    7c:79:79:b5:c8:fd:b5:a1:f0:28:7a:30:f6:91:b0:
                    d4:8f:45:7e:9c:13:2f:6d:cb:56:4a:94:0b:8d:a4:
                    b1:55:88:bc:8d:47:15:95:a8:1b:a7:5f:10:e7:26:
                    74:75:40:15:ed:e9:43:7b:c4:32:0d:4e:ad:66:dc:
                    ea:e6:c3:fa:a5:13:b0:fb:24:78:69:45:bb:40:5d:
                    cf:cb:8c:7a:02:ce:78:77:a3:33:bb:ae:9e:ac:b4:
                    fc:e1:e1:13:5e:9d:a4:02:e4:44:ca:08:5a:88:6c:
                    70:5f:51:81:55:4d:77:e8:f1:80:63:20:f0:45:17:
                    c5:ea:da:42:b7:3d:be:96:05:80:bc:3d:aa:46:b2:
                    ff:2b:6d:5a:33:30:51:43:d4:61:b8:09:92:bd:3f:
                    cd:22:b8:a2:a5:ec:8c:c1:ea:09:07:5b:ca:59:cb:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6A:77:E7:E0:CA:B8:9D:8A:D7:E0:5A:C5:27:1F:46:3F:C7:E4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/c3b1020a-5104-3a05-b95d-7ef8dd8d23aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:d8:d3:37:79:f4:c0:1a:b1:e6:3c:21:33:dc:e1:17:10:
         e3:bf:c5:7e:cb:ba:b4:e9:b4:ac:77:4b:db:fe:00:62:da:7a:
         03:a6:22:13:6f:0b:2b:1a:0a:66:f8:3b:cc:36:d8:89:f2:79:
         4e:88:d9:85:44:3d:e9:fc:e5:e8:c7:3b:d7:31:07:41:ab:9b:
         64:c5:51:ca:34:c8:0e:d3:57:ff:ec:89:59:17:10:80:68:be:
         9d:d2:c5:08:bc:e6:63:bc:98:8f:3f:32:f1:e0:19:c8:bb:7e:
         7d:72:fb:04:d0:53:e5:bd:78:74:12:f3:2d:46:6c:9b:ce:b1:
         ad:6d:84:f0:68:06:03:aa:3b:5f:1c:7b:2e:3d:74:fb:d3:c9:
         0c:ca:64:c4:fd:b7:db:7b:78:db:ba:ca:69:d7:f0:e2:9e:12:
         ee:d7:0b:62:e2:c2:af:36:f1:75:f2:39:8a:4a:50:71:77:0a:
         c0:52:85:25:d1:ae:64:88:d7:44:11:37:7f:00:c4:2e:cc:2f:
         38:cc:2a:4a:5a:fe:88:d0:86:88:3f:5c:90:73:cc:ef:62:a3:
         5e:96:41:59:a8:c4:4b:cf:c7:78:02:f7:f8:8c:bf:cc:44:73:
         0b:0a:b8:2b:36:34:7f:7e:4e:06:bb:eb:f6:1e:d4:ff:04:7f:
         96:e1:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org