Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd6bb4ce-9119-3e64-a06e-1f6c00df4e44.roa
File:                     fd6bb4ce-9119-3e64-a06e-1f6c00df4e44.roa (raw, json)
Hash identifier:          TObpv82c7FEztqCTH1za007hc7Xwavf264qrg3uW9kY=
Subject key identifier:   CF:F3:20:DB:02:43:C0:34:09:57:91:1C:F4:77:8D:02:40:E8:EC:A1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76412D67700AB9CC005FA0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd6bb4ce-9119-3e64-a06e-1f6c00df4e44.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     53256
IP address blocks:        208.103.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:41:2d:67:70:0a:b9:cc:00:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=b134d667-324c-4093-b94f-d3a1be4111fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6f:2d:25:25:0b:60:6c:6e:7d:e1:bb:48:db:
                    9d:91:d7:63:bf:8b:51:16:ea:6a:df:ee:17:37:82:
                    e1:50:9e:19:3f:05:a2:ea:e1:66:63:11:c2:6a:ce:
                    5f:f4:8b:5a:b1:0d:21:b3:b8:b7:76:5b:a2:c9:93:
                    7e:9a:0a:22:f7:cc:ec:94:88:ab:c7:39:de:e8:81:
                    51:81:e3:9b:3d:39:a9:5a:85:73:bb:47:16:e0:2c:
                    c4:a1:0c:b5:ec:25:57:b2:ee:f1:eb:fa:ce:92:56:
                    7d:82:ab:12:cc:7e:15:65:9d:6c:5f:f0:64:61:42:
                    eb:ed:fe:31:c3:42:74:a8:3f:f6:dd:6d:d9:72:4b:
                    08:87:6c:c4:9a:6a:71:2e:19:00:df:b7:cd:fd:82:
                    f1:11:fa:7f:5a:75:fd:75:a4:f4:99:20:09:ae:ac:
                    ad:73:ac:12:34:b2:56:3d:c6:95:86:99:10:3f:51:
                    8a:09:12:06:4c:1c:49:91:62:df:20:51:0a:f9:32:
                    c2:8e:79:ec:1d:ad:73:59:1e:10:80:a0:ab:3b:e4:
                    f4:d1:18:16:3a:1e:d9:b3:be:3e:f3:b4:a4:4b:cd:
                    83:8c:08:64:16:6f:6a:26:92:0c:fc:fe:d7:c8:d4:
                    9c:35:8f:a3:c0:c1:24:19:86:f1:7c:4b:d8:45:fa:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F3:20:DB:02:43:C0:34:09:57:91:1C:F4:77:8D:02:40:E8:EC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd6bb4ce-9119-3e64-a06e-1f6c00df4e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:ad:a4:80:ac:da:04:0c:4d:22:64:fd:06:b6:f8:1d:26:
         6f:a3:a0:74:33:ab:3e:1b:1e:08:90:47:58:6e:3f:f4:d5:c9:
         dd:65:06:e3:55:8a:d9:d3:a5:ac:71:41:b6:db:7e:1b:b0:6f:
         1e:6f:77:93:50:34:b4:f0:1f:c4:32:9a:1e:27:0a:50:23:33:
         7f:4f:4c:d6:e7:98:2a:e4:c9:3b:44:18:5c:7f:fe:ac:79:19:
         38:8d:9a:63:e3:d1:c9:90:fa:eb:92:d4:09:a2:ef:78:55:79:
         53:82:39:7b:1f:be:a0:cb:b6:48:d1:f7:21:c0:b5:e9:37:5f:
         2d:3b:c3:b6:61:b0:c7:eb:3c:3f:0f:d0:b8:88:be:e6:37:a5:
         cd:a6:c6:13:5d:0e:ba:2b:70:90:74:59:98:77:de:fe:e9:b4:
         4f:f6:b8:8e:b8:e8:7a:12:10:cd:3d:73:04:eb:67:85:3b:0e:
         20:19:9b:f8:75:eb:31:1c:9f:5e:13:66:1a:0d:e0:2c:88:37:
         71:de:8b:9a:b4:49:2a:07:a7:b6:38:c6:1e:ff:c3:72:4a:e6:
         70:e1:25:de:bd:1e:69:71:a7:9a:97:3d:67:4d:10:9a:9b:05:
         ce:a7:7f:97:8d:06:9e:33:ed:4e:1e:69:6f:0a:9a:39:c1:ab:
         c8:3d:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:51 2024 by rpki-client on console-ams.rpki-client.org