Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa
File:                     9c46e998-1908-3d4b-a119-3d998db7b89b.roa (raw, json)
Hash identifier:          WBkqzI1jF3JULHETBO0JVRjYvPH/UbYEhWe5nVV4qr0=
Subject key identifier:   5D:5B:C1:C0:C1:C9:74:F6:94:F4:9F:EB:83:BF:55:FD:1C:56:B5:0F
Certificate issuer:       /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
Certificate serial:       010D0C9F43285847C60F1FEB186AD611A8B48920
Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa
Signing time:             Tue 05 Nov 2024 02:00:27 +0000
ROA not before:           Tue 05 Nov 2024 02:00:27 +0000
ROA not after:            Mon 03 Feb 2025 02:00:27 +0000
asID:                     399673
IP address blocks:        216.25.96.0/20 maxlen: 24
                          216.147.64.0/19 maxlen: 24
                          2606:5640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c6:0f:1f:eb:18:6a:d6:11:a8:b4:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
        Validity
            Not Before: Nov  5 02:00:27 2024 GMT
            Not After : Feb  3 02:00:27 2025 GMT
        Subject: CN=6022ce51-b52a-446a-b5ef-9b405a1cc2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:b6:8a:00:66:ab:36:32:61:5c:a0:68:18:
                    7e:c1:12:fc:ef:75:d0:0c:b3:22:4f:89:c4:b4:20:
                    7d:b0:b1:90:70:dc:00:86:39:bf:16:8a:b7:c9:d5:
                    ab:71:5c:ac:cc:7e:46:6d:09:d1:75:45:b1:56:7f:
                    09:c5:29:8c:16:e3:96:ef:2e:92:21:0b:b8:90:6b:
                    aa:7a:7d:15:41:bf:26:3d:8b:79:77:f7:9e:79:db:
                    8b:0c:3f:33:78:4d:91:19:47:cb:69:45:0b:a3:f6:
                    e5:62:36:51:e0:13:41:46:79:07:dd:72:31:f6:c2:
                    bb:dd:14:f2:82:03:6c:7d:48:68:0b:24:38:7b:a4:
                    23:f7:65:4a:51:fe:b0:10:05:d9:fc:38:1c:be:be:
                    d9:0c:74:2a:0b:2b:04:d4:ac:90:76:4d:b9:d9:15:
                    06:df:0f:46:fc:65:71:1d:ad:76:92:7c:bd:c7:11:
                    63:a7:87:d9:53:0a:14:a6:4d:2e:52:cc:0c:52:d3:
                    a4:ea:54:64:94:d9:a8:56:13:7c:cf:ab:e7:3c:81:
                    26:56:d3:ed:9c:c9:f1:8a:01:56:40:d9:e0:d6:de:
                    48:e0:e3:cd:81:7d:a0:b0:d0:96:8d:6d:a3:8a:5d:
                    eb:40:85:e3:74:36:1c:fb:58:76:9a:dd:11:9f:e2:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5B:C1:C0:C1:C9:74:F6:94:F4:9F:EB:83:BF:55:FD:1C:56:B5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl

            X509v3 Authority Key Identifier:
                keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.96.0/20
                  216.147.64.0/19
                IPv6:
                  2606:5640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:5d:f2:c4:e8:0a:06:1d:da:b4:12:85:3c:d3:71:6b:8d:
         c3:4f:6a:86:5f:5b:8f:4f:ce:ca:f3:47:1e:0c:de:f2:46:d6:
         1b:e8:b0:91:78:78:c6:c0:4e:91:5b:05:6f:d6:01:ec:8c:a5:
         cc:e4:d5:b6:15:43:18:00:1c:8f:be:36:02:2e:e2:a9:0b:ec:
         bb:cc:d1:49:57:16:05:15:61:87:be:1e:28:9e:89:8d:5a:3d:
         5f:44:d9:6d:49:24:f6:81:eb:a6:e0:7a:c6:0b:db:c0:c7:06:
         86:36:17:b0:fe:76:a5:72:93:7c:8f:06:79:6d:26:9d:09:c1:
         56:76:cc:8e:ba:62:66:44:2f:ef:b1:4a:86:68:e8:73:28:9b:
         52:a4:10:e6:e7:9b:20:b1:7d:3c:58:7e:48:bc:e5:5a:25:9c:
         d6:b8:4f:e6:0b:2f:b1:6d:70:e0:71:fe:14:12:37:dd:6d:a2:
         9e:ee:6e:6c:41:ea:b8:c9:16:82:d5:58:bd:4e:48:a9:62:a7:
         76:de:a4:0b:06:6c:4c:75:42:4e:30:93:bc:30:e0:cc:d3:6a:
         c7:52:48:39:f7:5d:e1:a5:d2:31:78:82:45:9e:80:32:15:e8:
         ca:97:0f:24:6a:4f:75:ba:21:3e:19:75:3e:8c:ca:d1:13:f4:
         cf:ac:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:06 2024 by rpki-client on console-fra.rpki-client.org