Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
File:                     dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json)
Hash identifier:          C96chuvZntqCiTR0usZw3bm7H4j+zAQmZoi+MeksKag=
Subject key identifier:   A8:89:ED:1D:CC:4D:1F:DE:6A:31:16:C0:DE:D0:53:BD:5C:A5:EA:59
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F432858478721339997155644585B4358
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:33:99:97:15:56:44:58:5b:43:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=2eb5791f-a014-48a4-8287-4ab3cb755e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:42:9e:17:7a:a4:7d:f9:4d:5e:81:c3:06:
                    54:f4:48:1a:48:02:43:86:8b:d0:2e:21:b8:1f:c3:
                    a6:13:44:60:c2:d8:7d:2b:4d:e4:b7:a3:31:2c:41:
                    c9:01:8f:f0:ab:03:b3:08:7f:fb:89:8a:b5:f5:27:
                    ca:34:2d:31:25:05:8b:6f:dc:3d:75:0f:eb:21:11:
                    79:6b:2e:0e:3d:c4:3e:62:0d:93:8d:a2:fb:e7:a8:
                    12:ef:4e:66:39:d1:43:bf:27:fc:15:f7:07:7d:65:
                    f0:ae:1d:a6:30:f6:84:cd:5a:bb:ba:9c:06:95:16:
                    55:8c:37:68:d0:52:ed:7a:f4:1d:6f:1b:98:20:24:
                    df:f0:cb:eb:ba:fa:02:56:41:ff:d3:13:b4:21:4b:
                    ec:c6:97:12:b0:0d:ef:75:e4:a1:ba:a0:05:3f:44:
                    21:a7:67:d7:67:cc:09:1f:16:2b:79:eb:b0:7e:05:
                    59:57:a8:12:b5:63:0d:f8:ed:0f:a2:71:68:e3:b8:
                    e1:5e:43:68:dd:40:0a:bf:b9:b8:87:b6:5d:7a:7a:
                    92:fc:75:98:1f:44:fb:e9:12:89:c5:fb:42:ad:0f:
                    a6:1e:c7:d9:20:e0:39:96:8d:26:96:c8:f4:dd:13:
                    39:ce:10:45:ae:4b:f3:52:15:c0:af:29:48:90:57:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:89:ED:1D:CC:4D:1F:DE:6A:31:16:C0:DE:D0:53:BD:5C:A5:EA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:6d:5d:05:9b:c9:2f:9e:32:dd:a7:6e:b6:c6:eb:ba:fa:
         0f:33:bb:ae:7e:a7:3c:aa:c4:99:66:9c:59:0a:31:1a:96:03:
         60:5c:a0:c3:7f:3c:28:fb:55:ea:52:d8:c5:28:8f:53:34:0e:
         9b:3e:3a:2c:b2:c4:18:43:dc:59:44:09:cb:cb:c6:0d:17:96:
         33:e1:6c:19:57:6a:c2:4d:58:c2:34:fc:a0:4d:e6:ec:4f:56:
         1c:f2:ac:7c:27:3d:ec:59:c0:f7:c3:2f:97:99:83:b7:3e:d4:
         86:83:8c:8c:8d:3c:7b:a6:30:ad:ca:da:62:61:9c:be:bd:94:
         27:d2:c1:6e:6d:5e:36:0d:e3:1f:f8:eb:f2:93:45:e8:21:64:
         d0:89:0a:e2:6e:a6:51:e2:79:d2:b4:bb:02:41:e9:14:e3:f8:
         a8:74:56:36:93:fc:45:a6:03:a7:ae:71:f0:18:8a:a1:35:0c:
         fd:2c:12:7f:98:22:33:15:a1:27:ac:c4:a3:12:65:a4:c8:08:
         d1:21:1f:4b:79:df:45:7b:a3:2a:11:8b:72:84:c0:7a:36:84:
         25:84:ba:67:ec:5e:27:dd:0f:a4:40:f4:c5:b9:26:52:5c:af:
         da:7c:1d:2b:b6:2e:52:16:23:e2:ac:39:d7:96:1d:5e:bb:a7:
         6a:73:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:27 2024 by rpki-client on console-ams.rpki-client.org