Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
File:                     49130ff0-be17-33aa-addf-13c1e3898bc0.roa (raw, json)
Hash identifier:          wfxYW6BWBGoFJ8jby/EG0gy7VtYmgXNGRPmRkdxHt2Q=
Subject key identifier:   28:B2:B4:1E:8F:A1:6C:2F:F5:6D:A3:E9:49:39:A9:39:30:23:2F:93
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F4328584731FB203A3CCD28311CDF8FC0
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     8070
IP address blocks:        206.41.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:20:3a:3c:cd:28:31:1c:df:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=bfbdebb5-8eda-4fb4-b793-77e9691bffb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:b7:6f:e4:88:fe:a4:a8:03:40:f3:26:9d:
                    01:c4:c7:63:2d:93:13:a8:03:ce:04:81:3a:e5:3f:
                    03:60:03:d6:62:fc:cb:ad:e6:ce:65:55:6a:fe:25:
                    b4:89:2d:95:9c:02:25:9b:ff:07:f6:ad:5a:33:d2:
                    3b:89:6d:e5:cd:37:3a:54:19:21:63:07:99:21:71:
                    0f:82:2a:6f:8b:af:f3:79:a4:07:eb:1c:b0:08:61:
                    e4:8c:a8:7d:43:83:ed:26:b4:c2:26:63:31:c8:70:
                    91:4c:16:15:81:fd:4e:1c:7b:2c:20:b6:a2:4b:c5:
                    f6:8a:16:04:a3:21:45:42:b7:f0:5e:13:3d:0c:bb:
                    ca:bf:f5:e6:bc:86:02:16:44:e0:ef:73:57:b0:ec:
                    71:99:df:c3:5b:cb:62:7b:b9:b6:58:79:5e:c2:4e:
                    d5:ee:57:ce:8c:ec:f5:9e:45:7c:fa:af:2f:fd:bc:
                    9c:28:f8:f3:09:f7:b2:36:50:b4:de:25:c5:1e:c2:
                    c0:0c:71:41:e9:4b:b4:3f:ee:d4:31:5d:fc:38:c2:
                    2a:d7:29:da:8a:e7:31:67:1f:ee:0f:d3:f6:32:0c:
                    b7:98:f0:89:0b:d7:0b:ff:0a:dd:84:54:94:13:63:
                    b9:94:97:da:e6:8b:db:b1:86:25:dc:3d:4a:f2:2c:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:B4:1E:8F:A1:6C:2F:F5:6D:A3:E9:49:39:A9:39:30:23:2F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:09:65:a0:b7:83:c2:8c:3d:96:2e:25:8b:dc:de:77:c4:
         31:aa:a0:84:e1:7d:5e:a8:97:b0:74:75:a5:e7:38:96:d3:f5:
         8b:6a:93:2f:ea:46:04:d0:52:d6:74:c3:41:89:0b:5f:c5:4b:
         81:87:fa:4f:a4:d4:26:46:ba:00:94:e9:24:49:32:56:6f:5f:
         27:09:ca:a9:bb:b2:0b:1f:29:eb:9e:f1:e6:c5:e2:f7:c7:8f:
         b7:88:2f:22:ec:2c:a0:d0:81:5c:87:7f:0d:08:ed:d0:24:ef:
         41:55:ef:7a:51:81:bc:3d:9f:d6:ab:e3:b0:f3:dc:49:26:a8:
         2d:65:c7:79:13:ee:3a:42:31:f3:b3:fa:8f:52:3c:91:15:dd:
         90:2d:0a:c4:18:d5:c2:4b:34:15:ec:39:f9:d7:cf:f1:ef:7c:
         11:73:cf:78:4d:5c:1c:69:69:b5:c4:34:e0:14:e4:94:99:08:
         69:d7:f9:2d:ec:75:aa:87:46:83:d4:92:42:e2:b8:10:a5:3e:
         79:fc:ac:37:33:3e:86:96:62:91:96:1b:57:6b:fa:25:bc:c9:
         97:c5:8f:21:0e:5f:08:02:c6:3e:ec:8b:c7:65:73:a1:db:01:
         6e:27:6a:2e:c2:4e:50:f0:2c:89:e7:58:02:68:11:4e:c5:54:
         be:5d:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:48:48 2024 by rpki-client on console-ams.rpki-client.org