Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa
File:                     e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa (raw, json)
Hash identifier:          Q9768XOTcg4Zhqw/l6tq4ph5k4UvpfOyTdPAUlpwOVk=
Subject key identifier:   7B:69:76:E0:37:20:A6:8A:F9:D4:7A:03:56:1C:6A:2D:17:69:1A:01
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F43285847A2FC23C226BCD01F7C03EA58
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa
Signing time:             Wed 23 Oct 2024 12:28:56 +0000
ROA not before:           Wed 23 Oct 2024 12:28:56 +0000
ROA not after:            Tue 21 Jan 2025 13:28:56 +0000
asID:                     398471
IP address blocks:        204.108.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a2:fc:23:c2:26:bc:d0:1f:7c:03:ea:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: Oct 23 12:28:56 2024 GMT
            Not After : Jan 21 13:28:56 2025 GMT
        Subject: CN=916411d0-d56a-4797-b500-b9ff2aa78f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:cd:ab:bc:d1:c3:97:02:2a:25:c9:11:40:
                    31:e2:32:04:68:34:d7:08:46:8f:b2:1a:9a:64:14:
                    d4:13:33:f1:b5:9c:41:43:46:47:1b:1a:20:ed:b2:
                    c0:98:d7:6e:07:1a:c3:8d:f1:5a:d5:2e:cf:ba:55:
                    38:06:55:20:82:a8:7b:ea:d9:4f:21:75:90:46:1a:
                    92:01:29:bc:10:93:1e:b7:48:40:49:c3:b2:be:3f:
                    a8:57:18:1f:f7:69:0d:96:52:9b:4b:ee:ce:1b:c2:
                    0f:a1:24:9a:89:3a:6e:14:6e:72:dd:17:dd:cf:1f:
                    02:8d:92:11:d0:ca:15:77:a7:57:ca:c5:d6:2b:60:
                    d2:36:93:6c:18:02:0b:99:b0:56:a5:15:78:c0:36:
                    98:ab:11:49:ae:3d:07:46:ac:3c:13:de:ed:b9:f0:
                    ca:03:97:de:97:d2:b8:65:dd:61:bd:36:c5:ed:04:
                    72:b3:61:d0:43:4b:e5:29:61:dd:8d:3e:3b:70:3b:
                    73:9b:bb:1d:e9:e0:a1:83:4e:af:2d:d9:94:f2:97:
                    64:ee:cb:6b:78:84:ec:97:fe:82:b6:e8:6e:47:5a:
                    3d:71:4c:0b:64:47:fa:9d:75:a0:45:5d:70:cd:b2:
                    c3:15:04:b2:a0:e4:88:7d:5f:d8:96:fb:08:d2:ff:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:76:E0:37:20:A6:8A:F9:D4:7A:03:56:1C:6A:2D:17:69:1A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:3c:a5:17:f9:15:e0:27:42:82:e2:d5:7f:2b:02:ce:5f:
         cc:7f:c0:ed:13:a1:fa:6c:80:a8:5b:ec:cb:9c:e5:3d:29:73:
         dc:1a:43:6d:9d:16:1b:39:22:38:40:3f:84:96:1f:18:27:62:
         ab:83:e8:9c:6d:f4:a6:ec:7a:4b:b1:f7:19:47:57:e2:4e:25:
         0a:53:8f:3d:d8:e4:96:d1:98:1c:78:77:8d:af:5c:53:6e:68:
         a2:c7:24:f5:8e:1e:f2:f9:4d:9e:13:3d:09:99:3c:9b:97:f6:
         b1:b8:2b:6e:5e:25:89:ca:0d:dd:48:8b:99:12:f5:1d:73:0d:
         07:e7:6e:18:6f:02:ae:dc:65:2e:3e:6a:af:c1:90:99:7c:f7:
         75:a7:9e:d3:9f:a4:31:bb:7a:48:d4:97:9d:ed:9b:7a:7a:f7:
         8e:32:87:f4:a3:e8:91:e0:43:30:28:cf:b2:66:be:5d:ec:9c:
         df:f2:cf:78:0e:95:8d:1e:39:ed:15:ce:04:37:d9:bf:ae:03:
         27:0a:00:ca:1d:45:b0:12:65:2c:e3:f2:82:69:a7:aa:84:89:
         ad:d0:65:27:c8:42:39:c0:e3:cb:15:f3:b5:ff:3e:e1:5b:bb:
         a3:a1:72:8d:49:e3:2e:f6:5f:75:15:28:5c:2d:68:64:10:f1:
         dc:2f:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:17 2024 by rpki-client on console-ams.rpki-client.org