Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3bb74ff3-29a6-3340-921c-11a6badd29c7.roa
File:                     3bb74ff3-29a6-3340-921c-11a6badd29c7.roa (raw, json)
Hash identifier:          HtB20tD+gkxAJT2wt6gsgeUqtYw5T3oRnPQqadzTdqw=
Subject key identifier:   75:0D:9C:A0:92:2C:F9:64:1C:5C:FE:0D:74:99:55:5A:04:07:1E:BF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48FBDCC6AB8F02627F780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3bb74ff3-29a6-3340-921c-11a6badd29c7.roa
Signing time:             Fri 08 Nov 2024 15:05:02 +0000
ROA not before:           Fri 08 Nov 2024 15:05:02 +0000
ROA not after:            Thu 06 Feb 2025 15:05:02 +0000
asID:                     81
IP address blocks:        204.84.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:8f:bd:cc:6a:b8:f0:26:27:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:02 2024 GMT
            Not After : Feb  6 15:05:02 2025 GMT
        Subject: CN=c0d393ea-8aa8-4070-8106-2f18a97d3382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:3e:89:81:a0:3d:6b:51:a2:4d:03:26:40:
                    38:21:68:34:56:ad:47:d7:d4:61:bc:96:16:44:26:
                    86:ed:ee:ed:db:3b:d3:13:ae:21:73:f2:9b:85:42:
                    59:b4:d4:74:f3:7c:fa:b2:54:66:26:94:dc:e1:c5:
                    1a:59:58:51:45:8f:0d:bf:94:7a:28:88:7b:ac:07:
                    c7:28:09:8d:70:c8:76:3f:13:12:3f:a3:31:23:55:
                    fc:e0:36:6f:97:42:3e:fa:89:e0:6d:ec:74:65:37:
                    ff:6d:38:08:75:22:41:8e:4e:a1:61:14:ed:1e:04:
                    f8:f4:fa:dd:8f:df:75:44:c1:2f:ff:0a:71:79:d4:
                    87:20:0d:79:0d:54:67:60:aa:0e:93:61:d1:e4:9b:
                    a0:61:5e:bb:ba:8b:5d:da:c7:bc:4c:e5:6c:ed:68:
                    bb:0f:df:b4:47:91:82:fd:5f:25:f4:d6:9d:de:52:
                    01:a7:ee:51:dc:40:05:20:3c:2f:7d:f5:fe:33:5e:
                    48:c1:a1:6c:39:ec:77:cd:e8:17:e1:46:59:6f:b4:
                    20:75:9d:e5:ba:34:5d:54:32:88:d5:e7:86:29:e6:
                    98:55:80:f4:7a:fd:0c:ec:34:93:09:a9:dc:d3:6f:
                    f4:c2:af:32:79:59:47:1c:35:fb:36:f2:82:f9:a8:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:9C:A0:92:2C:F9:64:1C:5C:FE:0D:74:99:55:5A:04:07:1E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3bb74ff3-29a6-3340-921c-11a6badd29c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:8c:ee:e3:99:6b:ca:ea:fc:a4:7a:19:2b:47:c2:97:fe:
         0d:1c:31:09:b3:35:33:31:54:10:a6:b7:b6:14:e0:7e:c6:02:
         7d:27:96:be:0b:6d:67:56:42:60:f9:e7:c4:d9:90:18:ad:14:
         c7:5e:3c:25:5d:84:c2:ef:53:77:10:2a:33:50:d0:c5:23:f6:
         a8:25:93:6e:67:ed:7a:c0:a3:34:26:d5:e0:64:93:80:bf:7e:
         f7:40:1f:2b:e8:6f:43:e3:2a:6d:03:1a:31:b4:e7:2a:47:9c:
         2c:c2:d9:c4:37:38:44:22:2a:c1:8c:54:eb:e9:47:46:0b:36:
         92:0a:d6:f2:cd:f2:74:2f:b8:72:4e:70:77:d3:83:8d:54:a9:
         9d:e2:aa:21:fd:46:5b:39:40:80:27:c5:ea:26:ec:5e:f6:c1:
         62:ea:46:cb:de:24:b1:54:68:f8:c9:c4:3e:5e:69:5e:38:09:
         da:b3:81:87:a9:de:bb:0b:ed:b3:6a:31:de:28:d4:40:66:a9:
         9a:a0:ef:3c:09:07:89:9f:7a:9d:53:88:89:15:62:f8:64:77:
         ea:d5:0b:d7:fa:84:a2:c9:d8:ef:b2:e1:76:c1:1c:f0:eb:9d:
         b2:5a:b8:24:4d:34:f1:9d:16:e2:e9:31:76:dd:9e:d5:ca:59:
         0b:24:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:25 2024 by rpki-client on console-ams.rpki-client.org