Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/8ebe3e2b-0f72-32da-8117-32ab8247a701.roa
File:                     8ebe3e2b-0f72-32da-8117-32ab8247a701.roa (raw, json)
Hash identifier:          5YojtDfjwivxA+B67ZTlRJm4nFIkwo+wqt8qYJQw2JI=
Subject key identifier:   3F:1E:5E:F8:79:67:73:85:9F:6F:D3:A3:A8:50:31:BC:9B:BE:83:DD
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285847AB6C163B395596F692C1D680
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/8ebe3e2b-0f72-32da-8117-32ab8247a701.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     109
IP address blocks:        64.104.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:16:3b:39:55:96:f6:92:c1:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=a6ce75c3-233e-42cb-a071-9710fb48fa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:99:ed:45:c3:91:9c:b9:92:5e:0a:12:d4:
                    39:e2:1e:5d:97:1c:55:c0:6c:85:be:4a:6d:1a:60:
                    d1:2b:34:53:df:8e:73:9e:97:f5:de:96:03:63:32:
                    4c:e4:0d:96:ee:a1:60:e6:13:2f:cc:31:ac:10:b2:
                    f1:2c:36:c2:e8:6f:e4:87:2f:90:e1:c0:f1:47:69:
                    2e:b2:76:61:da:57:26:dd:52:5d:34:0e:56:8d:f0:
                    95:ed:e5:fc:18:c6:54:d5:1d:b8:cb:b3:86:86:0d:
                    c0:f1:68:75:e3:ce:d5:16:64:50:e8:e9:1a:34:65:
                    f1:38:c7:bc:08:c0:da:51:34:a3:e8:a4:d0:58:1a:
                    21:46:2f:5b:30:29:22:99:15:c4:7b:d7:10:45:43:
                    28:e1:0f:49:31:b9:27:c8:8d:b0:24:6b:be:a5:98:
                    40:37:03:6b:aa:7d:29:fc:26:4c:1f:17:82:c5:1c:
                    6c:61:c9:8d:9a:16:f9:25:ee:6d:86:60:42:e6:88:
                    cf:0d:17:b6:3d:ee:64:3c:4d:09:74:34:b9:7e:57:
                    f0:d0:63:3e:a8:c1:69:82:69:7f:68:9a:b9:4b:ab:
                    3d:df:ad:5a:b7:41:04:8c:a1:9c:2d:9e:e9:12:c0:
                    4a:f8:17:36:c3:98:47:81:5f:f4:fe:bb:50:61:58:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1E:5E:F8:79:67:73:85:9F:6F:D3:A3:A8:50:31:BC:9B:BE:83:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/8ebe3e2b-0f72-32da-8117-32ab8247a701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:63:4f:66:e1:9b:f9:d7:85:25:7b:5b:1f:d9:47:8d:a1:
         3e:cd:3e:ed:48:5a:61:66:c3:ed:8a:62:be:11:c3:05:ef:c6:
         9e:0b:e2:57:cd:33:16:15:c9:8c:95:c6:f7:63:22:2c:33:88:
         13:18:be:fa:2c:5a:ef:9b:0d:84:e7:60:28:a6:0e:b1:56:b4:
         3f:27:c4:dc:9d:24:6f:26:34:8d:00:15:b4:74:c9:43:ff:1e:
         a4:ab:79:87:28:45:69:41:e4:6b:61:8a:f5:35:86:3f:77:9e:
         76:98:8d:cf:b9:6c:05:f1:08:a8:8d:c2:fd:4d:9c:e3:b6:c8:
         2f:75:62:a8:b2:78:aa:cc:0b:6f:05:ab:2e:fe:f0:a7:79:4e:
         fa:32:90:77:86:e4:12:3d:b4:3b:d1:5b:c4:6f:e6:e3:c1:05:
         08:03:b8:ef:d7:41:5d:1a:4b:bb:ad:e1:8d:ae:e3:a0:ab:05:
         80:af:00:f9:b4:63:84:cb:cc:ec:c7:ee:ec:59:1f:58:61:f6:
         80:e2:3a:c3:c5:eb:80:8f:e3:3d:aa:66:0b:1d:65:fa:ed:4b:
         31:3d:41:62:36:ec:b8:94:dd:cd:57:b2:1d:d6:71:5d:46:f4:
         65:fd:e4:15:63:3e:ea:62:bf:10:25:66:38:53:64:ff:e6:4d:
         db:87:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:13 2024 by rpki-client on console-ams.rpki-client.org