Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
File:                     3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json)
Hash identifier:          me0JuYaZaZdkjvdrkC8if3ZETfRwIH1d3nllUm4teWs=
Subject key identifier:   BD:FB:7D:E4:D7:63:69:1A:99:59:CA:10:A9:95:8C:46:06:C4:07:F5
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584777C6411F48F507696C6615B0
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        208.70.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:41:1f:48:f5:07:69:6c:66:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=13b808b9-2465-46a8-94d9-4bd644ece9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:ce:e6:1f:30:ba:8c:88:85:30:00:c1:c5:
                    ce:7c:0f:a3:de:a3:a4:c1:6c:42:dd:12:fa:93:fb:
                    74:b4:b0:45:c3:14:7f:27:3d:ff:9f:8b:b4:0e:55:
                    55:8b:c3:bd:b7:77:cd:09:c6:65:c7:33:cb:37:f4:
                    bb:ca:24:2c:a3:8c:f1:3e:05:4e:56:d9:9f:d1:08:
                    39:6a:7a:08:bf:9e:d3:2c:1e:09:10:2e:8f:9d:20:
                    6d:dd:ff:26:82:fe:c4:62:18:35:68:27:4e:39:e2:
                    14:ab:8c:e8:46:60:54:d2:ad:e9:80:1c:f4:05:fc:
                    a6:95:6e:8e:dd:2a:68:00:f1:65:98:7f:5b:78:a2:
                    c2:05:23:e1:31:2c:43:fb:fa:c4:94:36:be:a2:78:
                    cf:9b:33:b3:d2:0d:ea:10:2c:59:19:bc:0d:a1:08:
                    8c:7b:43:6c:ad:bb:8c:07:c3:0b:6e:23:71:4d:d7:
                    a3:e3:2d:d8:1a:46:51:06:b2:29:93:67:47:31:85:
                    ed:26:c6:54:cd:13:db:2f:88:f3:0d:14:98:9d:3e:
                    d4:ac:a6:f1:13:e1:e7:92:80:cd:90:4d:be:1f:38:
                    2f:7b:5d:22:64:04:33:ac:6b:ac:c0:3c:a5:e2:35:
                    c2:1f:17:37:fe:ce:5e:a0:98:c9:23:4a:72:2a:db:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FB:7D:E4:D7:63:69:1A:99:59:CA:10:A9:95:8C:46:06:C4:07:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:71:65:c9:a6:d4:09:f1:35:07:62:70:b3:4b:0f:a4:6f:
         8c:70:47:fd:0f:b3:f2:85:50:5d:f5:e2:57:80:7a:9d:84:88:
         6a:d0:2d:62:5e:88:9c:a4:7e:40:e0:7a:f3:ad:1b:e1:07:da:
         fc:7b:aa:1e:20:cf:6e:6c:e9:de:d6:6f:97:ec:4c:20:ce:f7:
         36:45:54:3a:55:87:d2:a4:b0:98:ee:60:3b:a2:f7:19:c1:50:
         a5:e7:34:08:a9:0a:1d:94:10:44:9f:89:db:45:f1:b4:a9:33:
         b4:1c:6f:2f:2b:6a:63:80:7b:e8:da:5a:35:3a:fc:d8:09:62:
         be:e4:c6:cd:b9:69:4d:06:39:bb:d9:a8:1b:cc:53:55:bd:08:
         b7:77:8d:96:0b:b7:c7:63:c6:72:4a:ee:e6:81:6d:55:08:bf:
         22:b3:4f:61:fd:7d:84:cb:74:fc:75:c4:06:69:98:42:36:fd:
         bd:c5:f1:09:07:7f:35:9e:4e:0c:40:99:7b:f0:50:4b:78:98:
         a2:d3:5b:60:e7:25:bb:07:03:a5:8e:c9:ed:92:57:d1:ac:8e:
         94:ef:a9:00:60:68:cd:21:47:67:2a:58:70:de:dc:e2:11:0b:
         79:13:5a:df:cb:49:c4:8b:97:56:ec:6f:1d:c0:f7:0c:05:b4:
         b0:54:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org