Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa
File:                     bd743669-609d-3091-8a97-bfb27a8144de.roa (raw, json)
Hash identifier:          6q7MYUNAXuGC67gLBD0VabsGLuq7Zwf02/5xBQUEUh4=
Subject key identifier:   23:9F:54:54:C0:DE:E9:70:F5:27:44:6B:8C:05:BF:47:7A:28:A5:26
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A7637D9FDD690B357582C20
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     4997
IP address blocks:        208.39.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:37:d9:fd:d6:90:b3:57:58:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=4ed158ad-8bb2-400b-b106-7f970d22158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:74:54:76:02:e3:e6:ac:9c:18:f7:61:6d:
                    7b:57:c3:db:36:87:c9:51:68:04:d0:2b:9c:c4:36:
                    2d:e6:49:ab:c3:cd:e9:10:76:af:da:1d:db:fe:3e:
                    11:62:4f:95:7f:2e:79:e9:89:3e:71:6a:03:3c:77:
                    42:5a:78:de:bd:94:b1:58:15:50:13:c4:44:ae:68:
                    0d:eb:b2:6d:1e:cd:80:2e:52:75:ee:a5:1b:1c:28:
                    79:47:21:24:e8:b5:c1:b6:89:a3:b7:dc:95:8f:33:
                    42:3e:85:c1:98:e2:94:a2:76:15:4a:d2:31:54:c5:
                    ab:13:8f:b2:d4:61:ed:af:6d:48:77:b2:62:bd:ac:
                    d9:b0:de:7e:75:d0:8f:f7:7f:08:77:8e:ca:96:8c:
                    ac:cf:c4:73:08:b0:26:f5:39:6c:f2:ce:9e:4e:bd:
                    50:21:95:47:df:06:bd:3c:00:bb:32:88:4e:23:91:
                    34:02:93:93:dd:a8:c3:0e:3d:10:8d:5a:a4:19:c0:
                    85:9d:e7:d2:bd:06:3a:39:87:45:cd:f5:36:d6:af:
                    b3:17:f5:da:c7:01:37:de:e3:96:4f:2e:c7:8d:5a:
                    f5:42:2b:08:c9:a1:5e:34:23:b6:b6:53:ef:d3:73:
                    47:d2:68:0d:ae:56:75:11:58:4d:1f:53:90:2f:b8:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9F:54:54:C0:DE:E9:70:F5:27:44:6B:8C:05:BF:47:7A:28:A5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:16:8d:38:9f:d1:e0:6d:b6:7f:f4:5c:b7:e8:30:4a:8a:7c:
         65:42:4f:34:b1:71:df:74:da:4c:83:b9:6a:97:37:0b:99:94:
         64:80:0a:03:23:6d:8f:63:b5:46:9a:cf:01:61:1a:e3:76:e3:
         e6:5f:9a:7b:43:8e:81:90:37:3a:c2:9d:7f:1d:3e:92:e2:78:
         24:0a:ee:5f:de:a0:a6:09:93:e7:a6:77:a3:db:d9:01:b1:4c:
         24:89:81:b4:ca:97:6d:42:ea:08:81:c3:92:b0:d4:cd:c9:a2:
         eb:7a:69:e3:12:87:3e:a2:54:e2:cb:7c:5c:49:59:89:91:55:
         56:48:ee:35:c9:ab:06:f9:32:30:fc:f7:14:f5:21:68:91:2b:
         95:fc:6a:ea:74:8b:b2:95:ba:41:57:54:9e:fb:50:5d:01:30:
         dc:47:a4:c4:06:85:f1:d1:02:4a:c6:05:12:ae:93:33:54:d3:
         4d:e5:f5:41:9d:9f:36:60:4e:15:9d:aa:6b:d3:f2:c7:60:ae:
         7f:ce:4b:5d:92:ca:08:66:2b:f3:6b:15:a6:fa:97:a5:eb:3d:
         d6:4d:3b:fc:59:39:9a:f1:50:e9:86:59:89:57:3f:b8:84:a7:
         1f:f6:fd:90:a9:7b:04:c2:90:e6:e7:9e:cc:92:bf:7c:ba:c0:
         ed:ce:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:58 2024 by rpki-client on console-fra.rpki-client.org