Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa
File:                     3803122f-8f89-3418-b604-b66b21371855.roa (raw, json)
Hash identifier:          B8gR8CpOKnDVelHI8gfIr6txVf57sO+AW2bOzTMyGhA=
Subject key identifier:   00:2E:B0:DB:6D:DD:AE:7E:4C:F0:82:B1:4D:4E:5D:48:F5:89:24:E8
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285847DBEDC0653E3C7339554FCA40
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa
Signing time:             Tue 12 Nov 2024 22:01:01 +0000
ROA not before:           Tue 12 Nov 2024 22:01:01 +0000
ROA not after:            Mon 10 Feb 2025 22:01:01 +0000
asID:                     14315
IP address blocks:        67.220.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:ed:c0:65:3e:3c:73:39:55:4f:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Nov 12 22:01:01 2024 GMT
            Not After : Feb 10 22:01:01 2025 GMT
        Subject: CN=83b16aab-cb4b-446f-8067-9fd6296bb1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:db:1f:cc:95:77:d7:f3:d0:74:65:79:2b:
                    d8:4d:ea:39:11:19:ef:39:71:26:f5:97:97:09:b4:
                    56:b9:4b:c4:0b:c7:77:79:16:51:40:43:2a:c3:bb:
                    f5:72:8b:3b:b8:5b:4d:c3:11:d1:f5:5e:23:f3:22:
                    be:fb:8c:d0:2e:36:37:e2:50:0e:9b:f5:7c:3c:96:
                    33:1e:72:13:31:97:11:8f:33:cf:b6:49:4c:ea:b8:
                    d5:97:f1:ae:4e:d0:40:b0:9b:3e:3c:44:a9:74:04:
                    02:44:c5:f6:ed:09:b9:6d:da:58:1a:02:11:0a:d8:
                    0a:b5:52:4b:c5:aa:c8:0c:0f:5d:7f:8f:ff:2b:1a:
                    7e:98:aa:3c:e7:33:f6:2d:30:36:81:86:7a:2d:8a:
                    8f:2f:87:be:3f:5e:b8:42:e5:af:c6:c7:8d:55:46:
                    ee:0e:10:84:4b:28:8f:b4:37:48:0b:2b:f6:e5:48:
                    cc:82:5f:d4:c9:f8:98:2d:fe:c4:b9:b7:17:86:dc:
                    98:7c:91:53:17:57:21:73:bb:f3:4b:f3:8c:a5:bd:
                    ad:5c:19:c5:4a:85:3b:97:68:84:5e:22:45:93:6a:
                    07:ac:b6:a4:85:0e:90:77:ed:bb:00:b9:21:74:0a:
                    25:67:e8:b7:0b:fe:7d:d2:f7:b1:46:0e:1b:3a:81:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:B0:DB:6D:DD:AE:7E:4C:F0:82:B1:4D:4E:5D:48:F5:89:24:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:91:14:0c:81:3e:ce:04:af:e1:dd:b7:51:33:6c:6b:11:
         91:ce:9b:87:c7:9b:6f:c9:b0:95:a3:ab:9f:35:05:59:eb:a3:
         fb:69:e2:16:2b:25:3f:df:58:f2:62:1e:7f:de:aa:09:a7:a1:
         98:61:dd:3e:cd:e1:9f:93:a4:59:a1:a5:48:85:6e:ec:4a:4b:
         46:15:10:ed:d4:ec:45:c0:0e:1f:9e:4a:84:72:d6:dc:fc:f0:
         e4:ec:c4:0c:24:87:ae:01:32:b0:6d:2a:b5:52:68:6d:ad:d5:
         ea:f0:e9:31:43:16:75:96:0c:ce:3d:73:f2:25:76:25:41:d6:
         8f:14:6a:44:0b:7c:69:36:1b:36:ec:38:c5:dc:50:32:b3:e8:
         a9:c6:8b:b6:d9:70:12:8e:d0:a0:e3:41:bd:20:cb:e2:c3:f1:
         6d:6e:71:43:1f:d9:93:64:1d:a0:a1:9c:b6:17:df:82:d3:ae:
         3f:60:83:a2:25:56:80:4b:e5:4e:d6:4a:c0:c4:20:c4:85:93:
         89:be:23:43:e3:ee:8b:ee:2e:67:a1:fb:61:8e:cf:74:2f:7d:
         72:b1:7b:51:9e:6b:2b:ba:bd:dc:8e:d6:60:6d:f1:0d:3b:07:
         65:eb:9d:e0:e1:99:a3:3d:a4:af:3c:7e:ec:2f:12:6d:c3:35:
         c0:a1:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:29 2024 by rpki-client on console-fra.rpki-client.org