Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa
File:                     9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa (raw, json)
Hash identifier:          5YCbN8H3qrh8wKiwCQtT0jqqXEovF8paxMQ4NGoGuRg=
Subject key identifier:   B4:CE:24:34:72:E1:6B:D8:6B:F8:7B:13:90:DE:4B:83:F9:ED:B7:61
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285847CFD4D8B4BC6B8582DE7B1FD0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        216.52.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d8:b4:bc:6b:85:82:de:7b:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=0a3f4356-8501-4312-9520-2614d3899c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:9f:42:87:b3:09:77:15:12:8e:6b:eb:8f:
                    45:9a:3e:ad:34:1a:a7:e9:51:d9:60:ad:bf:ca:a6:
                    3b:7e:6d:d4:20:1b:91:ca:c4:96:9b:d5:92:43:74:
                    a6:dc:45:e2:80:aa:89:4a:45:ec:02:1a:ec:5f:d3:
                    13:1e:36:45:7e:03:74:e9:ce:14:bd:de:1d:c1:cb:
                    1b:b2:17:b9:e4:ea:4d:a3:1b:31:cb:f7:b2:30:84:
                    24:c4:4e:ab:97:df:a3:af:58:67:c4:2e:6d:61:a6:
                    ed:7e:0b:2d:7f:5c:e5:66:8f:b1:4e:77:4a:cf:40:
                    4a:95:f8:d2:d3:f9:0b:f9:ed:a7:c4:c0:cb:bb:86:
                    37:97:5e:a5:df:69:2a:a4:a9:f7:99:2a:d2:43:8c:
                    b8:ab:68:25:3d:18:ae:b0:2c:be:9b:02:96:1d:0a:
                    9f:41:85:fa:2c:5e:b9:34:ee:8f:85:1d:35:ee:b2:
                    55:a3:ba:31:4a:14:09:a9:71:34:2d:20:6b:b5:2b:
                    e4:ef:75:6d:19:ae:8f:48:7b:dc:50:f7:89:39:5b:
                    e0:1d:d9:91:1b:d1:c4:09:7b:5c:18:3f:4d:7e:1c:
                    ad:2f:65:45:a3:28:d8:a7:03:21:cb:7e:fd:1e:4e:
                    bb:6c:2d:37:ec:f0:e1:f9:81:de:a1:2b:25:ba:5c:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:24:34:72:E1:6B:D8:6B:F8:7B:13:90:DE:4B:83:F9:ED:B7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:97:82:1e:4d:3b:18:9b:a1:fc:a3:c7:70:0f:e5:a8:fa:04:
         94:92:d6:3e:99:28:e2:e1:ec:71:a3:7e:e7:85:a7:62:a3:96:
         ec:2d:41:dc:10:98:23:82:23:90:98:ce:55:a0:f5:f9:5e:77:
         29:e5:91:d7:20:6f:e1:ee:35:bb:dd:43:40:cc:9c:df:5f:43:
         58:25:8b:9d:8f:3f:17:66:ce:14:1f:9b:f4:99:f8:58:4d:b2:
         00:38:27:61:b0:53:58:af:12:0e:3d:84:a7:b7:50:e6:56:6b:
         0d:ce:f9:cd:8c:a3:8b:83:38:24:0a:57:96:b3:39:c0:e8:16:
         cd:72:b6:a5:b5:11:d6:f8:bb:09:56:82:6a:29:a7:c7:ae:54:
         f2:97:b3:cd:07:02:46:18:65:25:f3:a4:ce:cf:e4:43:bc:09:
         11:f3:ad:08:52:2f:19:3a:00:49:61:f1:3c:d1:9e:3c:8b:86:
         c8:3f:9c:0a:e7:1e:25:9f:14:7e:93:88:d4:41:ed:22:d9:74:
         dd:75:08:37:14:f5:d7:c5:37:04:77:12:a9:25:75:91:92:33:
         5f:e4:c6:85:7b:67:26:24:98:56:62:7b:1e:ec:95:21:3f:f3:
         1a:90:df:ae:dd:84:53:ad:0c:49:57:27:66:fa:8a:71:c4:e7:
         7a:f7:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:52 2024 by rpki-client on console-ams.rpki-client.org