Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa
File:                     0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa (raw, json)
Hash identifier:          lAxnFSGj1bl9d10Sx2LNHCsefjvmRMpFAcQLO1gfHE0=
Subject key identifier:   12:E1:1A:B0:40:C0:3C:5E:3D:33:46:2E:9B:5E:3C:41:91:13:D1:9A
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F432858473A5B2E5106ABACB0676F4400
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     35923
IP address blocks:        199.65.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2e:51:06:ab:ac:b0:67:6f:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c21d33d4-0fac-4ac1-8caf-365df0d53e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:e6:0e:62:55:57:a1:19:d9:25:97:a0:4a:
                    91:96:cf:06:c7:46:fa:3e:05:d9:24:ee:d7:87:a3:
                    b2:83:b8:c6:b4:b4:b6:bd:59:82:ec:d9:aa:bf:00:
                    ec:62:18:be:f5:c8:84:65:7a:75:b4:b2:db:c6:4a:
                    c6:52:18:49:8c:ee:20:79:23:e7:da:55:2f:35:cf:
                    0f:b8:d0:f7:3f:77:34:ac:97:77:1e:3e:63:6d:21:
                    18:79:c4:98:cd:57:e5:b9:13:59:94:81:0c:6f:02:
                    09:c6:08:e3:6a:30:4c:03:19:ab:87:47:3b:d8:ac:
                    af:04:81:27:53:3b:ff:75:d0:56:fe:9c:2f:b1:d8:
                    08:02:70:ea:36:d5:0b:de:92:f4:6f:95:c1:ad:f1:
                    1d:1c:0d:79:22:7d:ad:9c:29:e6:ad:a0:71:6a:97:
                    81:a0:c9:77:1a:c2:87:1b:99:5d:6f:93:79:a1:02:
                    de:c5:80:e3:2c:38:ea:f7:4d:52:db:a0:2e:c9:18:
                    b5:a5:02:5a:bc:6f:fe:39:8b:04:cd:cf:79:e2:7a:
                    ac:e0:8b:29:2f:ee:9e:6f:18:01:8a:89:77:37:05:
                    c6:93:28:69:7c:3e:aa:b7:b7:ec:a9:0f:da:c9:71:
                    35:5c:ca:d4:39:f3:7f:4e:b5:07:0b:a6:c0:2f:70:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E1:1A:B0:40:C0:3C:5E:3D:33:46:2E:9B:5E:3C:41:91:13:D1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:a5:bb:46:6f:29:a3:10:a3:3a:bc:15:5d:8f:ed:6d:d1:
         e1:40:f2:cd:e6:a1:c5:de:fe:ef:73:88:fc:90:17:f0:85:84:
         f7:6e:e5:14:5a:3f:f4:85:4b:e6:f5:d3:fa:81:81:4b:eb:b9:
         4c:50:ae:08:a8:83:36:ba:43:0e:a2:88:53:0c:4c:b4:d6:35:
         04:f0:1e:cd:27:03:59:3d:b7:ca:55:b1:86:54:f7:ed:c0:1e:
         35:a5:2b:14:9b:d4:66:da:0b:e1:ff:9e:80:1d:4f:29:c0:10:
         a1:a4:5d:39:79:96:b1:59:39:c0:c6:61:6e:73:dd:57:99:b1:
         07:33:fc:04:f0:ae:85:74:a9:50:b3:47:64:06:04:6c:e3:f1:
         0e:e4:29:d4:09:bc:f2:dc:22:52:7a:cb:8b:33:79:63:23:9f:
         60:11:71:93:30:48:62:7e:d1:7e:b6:37:98:bf:e7:b9:9b:98:
         71:c9:dd:b3:f3:d6:9a:3c:f7:bc:b6:19:51:8a:1a:b7:16:2f:
         a5:21:28:31:4f:3a:9c:7e:ba:1d:2b:85:d8:00:55:15:d6:99:
         fc:53:a3:69:a5:ac:bb:4b:12:2e:f0:73:a4:f6:38:56:ac:f9:
         7c:84:79:12:82:30:b8:d3:d2:f3:b3:f2:ab:98:65:52:4d:48:
         e2:6e:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:10:29 2024 by rpki-client on console-ams.rpki-client.org