Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File:                     60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier:          +Bo/p0+lNKY9mYCtohYL4HlUQURRltFC4I20J6QMRTQ=
Subject key identifier:   CA:A5:BB:BD:0E:2C:25:A8:8A:7B:79:6C:C8:EC:BF:BB:57:8D:04:69
Certificate issuer:       /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial:       010D0C9F432858475EA61648B2EEF9A805EED800
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     395555
IP address blocks:        170.10.64.0/22 maxlen: 24
                          170.10.72.0/24 maxlen: 24
                          170.10.84.0/22 maxlen: 24
                          209.206.64.0/19 maxlen: 24
                          2604:4c40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:48:b2:ee:f9:a8:05:ee:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=393df968-11f3-4c66-9d31-048e6777aa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:04:67:2a:58:72:11:a3:48:bc:18:2e:60:
                    c8:c9:18:41:44:3a:d4:c1:55:54:2e:2f:05:a9:e1:
                    72:79:6d:e2:5c:03:9a:14:3c:76:45:c8:ea:eb:03:
                    3a:03:86:35:85:97:07:c7:4a:51:55:cc:6d:7d:de:
                    e8:70:2a:42:be:af:61:d7:99:fa:09:43:e8:30:fd:
                    df:c9:96:cb:67:cd:b3:ac:3e:19:bf:ea:05:a8:58:
                    89:30:2a:04:6d:2f:bc:0c:98:f5:1d:e5:b9:34:06:
                    ce:82:79:f0:cb:26:1e:42:dc:be:77:86:46:4d:b4:
                    19:69:d4:09:1b:67:ee:3b:d2:63:d1:18:b3:36:55:
                    1b:90:43:58:0e:cb:67:3c:0b:ed:1b:7a:a7:b3:3a:
                    cb:e9:a1:d3:93:79:dc:32:d7:78:ef:99:3f:f6:c4:
                    66:c3:52:56:87:65:56:f4:ef:3c:3f:cf:d1:5c:89:
                    68:7f:2e:9e:13:6a:a2:cc:79:8f:b2:96:9f:a8:52:
                    80:e4:14:42:49:d5:9a:a2:b1:d1:13:3b:ae:fb:47:
                    ae:fa:1f:7c:1c:db:34:61:7d:39:b5:76:a3:61:06:
                    14:9a:b2:e7:2e:78:87:ac:03:da:7b:98:fe:ef:1e:
                    ea:ed:98:12:a9:19:3f:0b:92:34:c8:3f:55:22:39:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A5:BB:BD:0E:2C:25:A8:8A:7B:79:6C:C8:EC:BF:BB:57:8D:04:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.64.0/22
                  170.10.72.0/24
                  170.10.84.0/22
                  209.206.64.0/19
                IPv6:
                  2604:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:58:e2:68:9d:01:06:98:9c:7c:75:e3:35:ee:ff:b3:d4:95:
         af:36:de:7e:6c:f9:c4:96:b7:9d:52:fd:48:72:5f:c0:5a:03:
         4c:5e:c0:81:d6:8f:7e:dc:1d:df:5d:bc:e8:58:c2:e9:a9:b8:
         32:9c:6d:99:b6:dd:00:0a:32:04:22:ad:58:eb:30:90:ad:c3:
         4a:68:eb:ec:8e:73:8e:dc:b0:6d:cb:7e:45:f3:c9:23:1f:41:
         d9:68:c4:f9:a6:2f:a2:8c:84:a2:84:0e:42:93:54:dc:13:5c:
         19:f1:d2:63:7a:1f:a9:1b:80:cd:67:d3:b9:0d:97:80:09:f5:
         f5:6a:05:4b:d2:1e:23:71:f8:a9:33:9c:3b:8f:0b:c3:df:df:
         d3:5e:db:87:7a:0b:dc:db:65:73:c8:58:53:c5:85:c3:c8:40:
         dc:e1:70:31:ee:5a:de:e8:a1:d3:9b:7f:b1:81:f0:24:26:32:
         ed:a7:d2:07:a3:44:b6:0a:f4:07:97:c5:af:1c:66:d1:8d:32:
         b6:15:6b:0a:78:b9:02:6c:6d:02:1e:3c:5f:ca:04:a1:da:82:
         6a:c6:e3:d9:a1:2e:5c:06:f3:e9:27:5e:d1:a2:9f:10:9b:0b:
         dd:d0:84:8e:80:48:5a:fe:1e:c6:59:73:da:76:2e:41:8d:b0:
         f7:c3:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org