Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0b0b58f2-b091-3606-a66f-5fcb8e4fa1ec.roa
File:                     0b0b58f2-b091-3606-a66f-5fcb8e4fa1ec.roa (raw, json)
Hash identifier:          ydy4XyRwKuhwEL9s6amvMUECH3/l30otIUh3sy8j/Nc=
Subject key identifier:   51:21:54:C0:FD:62:BC:3D:9C:34:50:FB:4C:32:4C:27:1B:FC:77:01
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D661AC1A2FD9E10E12E1C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0b0b58f2-b091-3606-a66f-5fcb8e4fa1ec.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        209.82.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:61:ac:1a:2f:d9:e1:0e:12:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=dbf2312e-c1d8-421d-a9eb-ce186005dfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:aa:61:56:be:c9:fd:d0:f9:04:97:a8:ab:
                    0e:3a:68:26:6e:b6:57:cb:38:20:0a:ca:70:20:f3:
                    af:0e:e2:30:f7:bb:51:e6:ce:5c:c2:af:80:69:58:
                    dd:0c:ce:1e:df:ac:47:a7:6d:39:29:b5:ee:d4:c0:
                    45:64:32:62:52:a5:98:11:0b:23:bd:f5:c6:b4:bf:
                    1c:4b:3f:25:1d:9e:1f:95:e7:16:88:2d:25:be:2b:
                    4b:9b:ce:8f:94:b2:6a:d1:d9:43:5e:69:c7:6d:b8:
                    7c:ab:83:0c:ec:4a:e6:1f:7a:d5:44:eb:95:72:61:
                    32:ff:20:c8:74:42:9c:c9:bf:ab:e4:4b:2a:ed:d4:
                    e8:0e:c7:58:c8:db:67:2c:d8:d3:90:5c:40:c9:b0:
                    0e:21:5c:c6:ae:f3:17:2c:59:56:af:22:b3:a1:1b:
                    cb:41:c7:b4:87:f5:9a:8b:8a:44:d6:e2:c3:2d:6c:
                    20:f3:88:5d:e9:49:3a:af:39:93:14:ea:33:15:59:
                    b1:1e:68:09:53:cc:e9:fd:7a:5b:7e:89:51:85:68:
                    e8:29:8b:f9:72:c5:48:cf:7c:63:12:cb:87:a2:ab:
                    e1:40:83:e8:d0:ea:10:94:d0:94:1d:2b:b5:6a:3b:
                    f7:12:d7:b0:1e:a1:b0:ff:88:08:b1:69:10:7f:0d:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:54:C0:FD:62:BC:3D:9C:34:50:FB:4C:32:4C:27:1B:FC:77:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0b0b58f2-b091-3606-a66f-5fcb8e4fa1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:ca:21:cf:99:b3:2b:b3:90:69:3f:74:b3:e2:53:47:86:
         31:0c:e8:1a:01:a4:2b:57:e0:e3:1b:82:95:dd:df:d9:d5:c6:
         bf:07:a2:e3:2f:d0:0f:73:20:b8:ce:92:9c:52:0d:19:0f:f8:
         2c:57:1b:4c:ad:50:6b:cd:36:9e:43:6d:46:e1:0d:c6:e9:af:
         ba:6d:d2:25:1f:9a:8d:ef:5f:a1:4a:3f:22:c3:d3:8a:3c:cd:
         f3:2e:48:86:3a:b0:fb:d8:7a:48:d8:8d:89:11:44:96:33:bf:
         01:a5:c4:83:69:df:5d:f3:cf:39:d2:02:4b:a8:8b:d6:5b:5b:
         25:1c:2e:b2:3a:34:a6:c1:96:85:41:4c:cc:40:d2:bb:b7:32:
         bb:c8:b1:7a:e2:67:a9:c3:27:a3:3a:1a:5c:73:59:f2:73:17:
         56:38:6a:54:62:e2:4f:71:3a:f4:e3:07:3b:7a:16:e4:48:66:
         b2:75:84:3e:52:7d:4a:e7:86:a4:18:f7:04:86:2f:2c:68:a2:
         1d:b9:fb:b3:b6:a9:b8:09:e2:22:94:60:7b:6c:c5:fa:98:e9:
         51:ef:25:65:10:19:77:ff:5f:b7:5e:bc:de:4a:ca:45:6f:03:
         93:9f:cb:7d:52:82:cb:ea:f6:d3:51:c3:7c:5e:d5:c0:42:5f:
         27:07:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org