Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa
File:                     3a34883f-177e-3191-a33f-0a07fc991f5b.roa (raw, json)
Hash identifier:          bbdkWnLZ3bMymFtBs9zHRowcobLb6VNCTEapak1xYX4=
Subject key identifier:   6C:8A:BB:E5:39:6E:7C:77:F4:55:19:51:1C:36:C5:7F:44:11:54:E0
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A24F5ABAD441CC892300
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a2:4f:5a:ba:d4:41:cc:89:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=adf4d245-5173-4831-8f24-a853c93b222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:b6:33:39:c5:0b:d2:84:d7:0b:e9:7d:3b:
                    b1:0c:87:48:81:9e:94:86:c7:88:f8:c4:41:0f:10:
                    7a:07:64:68:b9:84:e0:66:31:65:19:f5:f3:f3:f9:
                    6a:8f:33:3c:cc:44:c3:e6:6f:9d:36:b6:c5:6c:15:
                    f7:aa:80:2c:41:33:00:8a:65:20:44:0a:c0:1b:b1:
                    ea:79:81:4a:ca:30:b6:4f:c9:0b:9c:a9:e0:53:54:
                    fe:09:6f:ac:ce:e1:6a:14:bb:d5:b7:e9:59:5e:64:
                    b5:ff:24:4e:c8:63:07:cb:35:99:77:d7:b3:92:1c:
                    59:5c:aa:5e:41:d2:ee:a5:3e:26:44:5c:a2:4e:cc:
                    40:ad:d6:aa:d6:1f:e7:79:fc:b8:04:06:0a:44:6e:
                    e2:86:61:50:fa:3c:15:24:93:1a:51:3f:7a:4a:5f:
                    1a:a4:9e:cc:e9:b1:c4:5f:e8:2b:36:81:f4:01:b9:
                    b9:d9:1e:19:28:cb:76:8b:8c:0b:ca:86:7a:9f:24:
                    e0:e8:cc:61:9e:ef:fa:35:20:fc:9d:fe:12:3f:79:
                    13:e5:f2:4a:a4:59:f7:f7:0f:7d:6a:06:c1:4d:f1:
                    13:be:bc:68:4a:4f:63:07:09:a6:66:ee:8d:33:4e:
                    09:78:fe:ad:8e:4a:b4:e9:e9:cb:e6:82:fa:82:0a:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8A:BB:E5:39:6E:7C:77:F4:55:19:51:1C:36:C5:7F:44:11:54:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:31:3e:d9:30:af:7f:ca:51:24:ad:7c:5a:dc:bb:2f:3e:
         0c:c0:bd:fa:37:f3:cb:88:90:26:52:b4:18:46:c0:3c:c8:4e:
         28:11:ec:b2:a8:2f:ac:c5:88:83:01:bb:e7:73:8e:7b:6e:ef:
         0e:fb:93:6b:c7:c3:fd:8c:30:82:1b:9c:91:f8:ec:4b:f0:42:
         41:58:ec:4c:40:86:e7:a0:8d:26:a5:96:5d:5e:e9:4c:d6:21:
         4e:ef:17:61:4f:5c:a2:34:1c:d0:7b:84:88:eb:91:fe:77:cd:
         e4:47:38:a6:b3:9d:31:cc:79:68:00:fa:c5:e4:16:44:fd:a4:
         cf:b0:24:92:5a:db:2b:f9:1d:f4:ae:e6:a0:e2:3e:ad:43:6e:
         6b:96:99:5a:27:b1:ec:cb:bc:48:6b:d7:0e:2d:90:c0:5f:2b:
         ea:26:99:ed:e7:6a:a4:21:4a:55:ca:af:8d:bf:95:43:3e:ed:
         af:d7:db:ab:fa:84:ec:42:2b:dd:17:28:1a:e8:aa:20:98:13:
         d7:94:ee:a7:b3:94:17:48:2f:7a:96:00:1e:00:02:11:b3:4f:
         f1:a6:ad:e2:07:52:37:1a:b8:5e:6a:a5:a0:9a:28:7a:3d:86:
         fc:36:bb:77:f7:21:b4:f2:b0:94:75:81:c5:88:75:8e:52:b6:
         03:cc:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:53 2024 by rpki-client on console-ams.rpki-client.org