Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
File:                     b938ef69-2886-35a9-9252-032a68a12f49.roa (raw, json)
Hash identifier:          k0UX/+6RVfeqLyIF9C2AszjXIZocpVd2g/MlWtQVFZM=
Subject key identifier:   D4:E0:41:41:51:C0:A1:2D:C1:6C:53:B5:F8:34:37:08:0A:36:B5:9D
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285847924BDE03968366AF47035190
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     11290
IP address blocks:        209.15.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:de:03:96:83:66:af:47:03:51:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=43a79037-4e64-4589-bfa0-7961bd145223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:cc:9c:9c:50:ce:b5:97:16:00:fe:81:6d:
                    6b:38:41:ce:6f:cf:2a:38:fa:02:be:e0:2a:56:51:
                    7c:03:5a:c6:61:e1:fe:25:4f:b8:9c:f6:b1:16:92:
                    fb:99:5d:ef:04:a7:b5:0e:38:83:9d:af:a0:dc:c1:
                    13:d9:44:c7:7f:1b:66:1c:6e:dd:be:51:43:b2:a5:
                    ec:2b:f4:ca:fa:b6:25:84:3c:c6:df:34:51:d1:ef:
                    ab:8e:a5:9b:15:2b:11:10:38:4b:2e:5f:ea:3f:ed:
                    02:e5:4b:5f:db:6b:84:81:dd:de:45:e4:b5:d3:44:
                    7a:d3:77:03:6f:12:a7:17:b8:31:3a:be:79:93:6f:
                    06:d1:73:9b:0c:26:28:cf:ec:2c:59:18:ea:16:de:
                    4f:5e:ed:30:ba:f6:ff:ed:96:49:79:fa:16:31:d4:
                    66:e9:5c:16:33:db:19:01:ec:a0:68:13:3e:aa:16:
                    03:0f:7d:b3:bd:5f:41:6b:ee:1b:3d:54:aa:92:d0:
                    ee:70:4d:49:a1:dd:d7:29:a4:61:8b:ef:3e:3d:c0:
                    c9:b6:6a:bf:c9:a5:ab:f8:d1:41:84:6e:6c:e9:ae:
                    f4:df:d4:6a:8d:f4:e2:e8:57:95:2e:77:02:2f:7a:
                    b9:78:aa:1a:d4:ad:67:9a:bb:f1:a5:d4:f2:3e:21:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:41:41:51:C0:A1:2D:C1:6C:53:B5:F8:34:37:08:0A:36:B5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:b4:6f:2d:3b:9e:81:ec:63:05:6f:3c:39:73:24:5e:72:
         4a:b8:61:7b:42:90:db:74:b5:c6:4b:55:ea:de:14:6b:23:34:
         da:8a:66:b1:4b:05:2d:a3:ad:07:81:6c:02:f3:37:b1:b1:45:
         15:81:a3:92:ec:d2:f5:2c:0b:9a:3e:1d:b0:44:d6:8e:fc:0d:
         8b:9d:ce:f4:6f:16:f6:76:8e:a8:e3:c4:25:9c:f9:67:c2:fc:
         97:68:48:d3:f6:b4:87:d5:1e:d6:90:c1:c4:7e:4b:e0:bf:3f:
         9f:0a:6c:c8:12:96:3c:f0:e9:0f:5d:29:bd:fa:09:58:43:fc:
         85:45:dc:c4:38:3d:76:30:db:26:ad:41:78:31:49:10:2b:3f:
         13:52:09:d9:fe:44:2c:8f:48:3e:35:6c:e0:02:88:d1:18:19:
         33:ec:c9:65:7e:1d:81:5e:53:29:98:fc:d0:6a:05:30:26:f9:
         24:a1:0f:05:21:a9:d9:82:8d:3d:88:95:bf:85:d0:5a:c2:aa:
         b8:81:33:c8:8e:6a:ef:37:e1:72:1b:85:93:93:21:41:76:3b:
         6e:a1:e6:5d:42:2a:10:31:0a:ca:16:c3:93:b4:e1:ab:5a:df:
         00:b5:6a:93:32:12:16:61:29:e0:08:2b:f1:6a:ff:21:d2:c0:
         1d:ab:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:13 2024 by rpki-client on console-ams.rpki-client.org