Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa
File:                     25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa (raw, json)
Hash identifier:          GcQa0CbTqJGQSwv4RYlCufKTUxGLqz6XZL6ZdGG+2LM=
Subject key identifier:   ED:B7:3C:0E:64:B0:FE:27:14:18:F6:4E:0A:0D:42:FE:4C:52:40:62
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F43285847CD9117BE558830A313156300
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa
Signing time:             Thu 07 Nov 2024 18:33:00 +0000
ROA not before:           Thu 07 Nov 2024 18:33:00 +0000
ROA not after:            Wed 05 Feb 2025 18:33:00 +0000
asID:                     399575
IP address blocks:        206.204.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:91:17:be:55:88:30:a3:13:15:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Nov  7 18:33:00 2024 GMT
            Not After : Feb  5 18:33:00 2025 GMT
        Subject: CN=05656406-f1d2-49af-8114-318f5554011a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:0f:3b:8d:cc:8d:e1:51:a9:8f:5a:d9:81:
                    83:e8:a3:ee:85:d2:ae:8b:00:9a:5f:32:12:f8:ce:
                    1a:42:d0:3c:da:b9:d7:45:0c:9c:ec:31:96:ab:c5:
                    79:d1:09:32:c4:96:e5:e8:bf:1e:0f:c0:30:f5:43:
                    12:a3:de:ff:fd:d5:6b:8f:09:10:88:0b:c9:06:a2:
                    8d:e0:99:6c:9c:52:27:63:d4:91:b3:6d:e5:96:20:
                    80:70:18:77:7a:42:39:8d:a5:f4:17:5d:0a:93:dc:
                    09:d4:2e:ec:0c:0b:5e:4d:e2:9b:a5:c0:95:e2:5b:
                    c7:cd:18:49:7b:3a:ac:65:bd:8b:7d:4b:23:21:ee:
                    24:4f:29:89:53:ae:23:27:de:7c:79:54:35:8b:a1:
                    10:c2:16:41:0d:f5:25:5f:fb:31:4d:c2:31:40:b9:
                    b6:bc:1d:fc:1d:18:6e:02:a4:5d:11:a0:3a:b7:55:
                    a0:0e:72:db:e0:b5:92:05:bf:ab:91:fe:e6:cc:3f:
                    2f:5f:db:26:ab:85:b2:9f:65:a9:f6:58:e0:68:80:
                    0d:11:0b:2f:1a:36:87:05:c4:b3:7a:3a:6a:3e:28:
                    d9:e4:58:94:20:1d:37:21:43:1d:67:6b:1d:9e:66:
                    bf:91:89:94:74:e5:63:a5:57:b3:25:c1:82:c0:e7:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B7:3C:0E:64:B0:FE:27:14:18:F6:4E:0A:0D:42:FE:4C:52:40:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1e:97:00:a3:80:b2:b6:ed:b1:22:55:2c:02:f8:22:33:3d:
         c1:d5:f2:1c:79:57:de:7f:8c:a2:fc:7c:cd:cc:44:ed:0d:17:
         e1:1f:13:e3:6c:26:3f:e3:0b:51:a2:ae:13:b7:6e:f3:51:b3:
         41:61:7d:a0:3a:9c:f8:72:29:1b:cc:e1:71:a6:64:ac:45:85:
         a8:02:9b:78:b4:2a:f6:36:d0:1a:41:f9:e4:61:bf:08:69:48:
         fe:ad:b5:a7:d3:11:07:13:e8:f0:98:be:2b:d5:ff:f3:8a:da:
         da:80:45:4a:bc:15:7a:05:ae:09:1e:d4:1f:93:bb:cb:53:aa:
         01:d8:1a:64:d5:f0:66:7e:5b:24:e6:2c:d3:9b:9b:49:da:37:
         17:82:fc:b4:cf:d6:3d:0b:f4:68:9a:84:f2:df:d4:da:83:f4:
         da:1b:43:42:8f:26:1b:e7:6c:09:39:4c:28:02:8f:b8:16:74:
         89:b4:b8:a5:9a:3b:66:16:19:f8:a2:f2:20:1a:4a:3b:5a:f8:
         7a:23:12:13:e2:42:a6:88:86:f7:83:47:7c:8f:3d:f6:7d:f2:
         25:e0:e5:94:d2:e3:45:57:49:85:56:7e:ec:9f:82:98:8b:46:
         48:58:cd:f9:9e:08:dc:9a:58:9d:8d:16:0e:50:f1:97:d4:ee:
         4d:91:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:18 2024 by rpki-client on console-ams.rpki-client.org