Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
File:                     94ceadef-1e5b-31a7-a38d-5365f1cab273.roa (raw, json)
Hash identifier:          f+y7hNRwXYpSPEQ2sBCVS0eyQFlFK/kpjmd8bteEK0o=
Subject key identifier:   FE:75:70:E7:6F:CF:93:99:17:83:F8:EF:F4:1E:06:65:CE:47:6F:FA
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F43285847CD8FFD924222BA1A0841BA80
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
Signing time:             Thu 07 Nov 2024 18:30:47 +0000
ROA not before:           Thu 07 Nov 2024 18:30:47 +0000
ROA not after:            Wed 05 Feb 2025 18:30:47 +0000
asID:                     399575
IP address blocks:        206.204.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:8f:fd:92:42:22:ba:1a:08:41:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Nov  7 18:30:47 2024 GMT
            Not After : Feb  5 18:30:47 2025 GMT
        Subject: CN=26e65e97-e628-42db-97c2-08d9f3e496d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:a8:0e:1e:51:27:8a:8d:c6:98:98:e1:ad:
                    5b:eb:89:ba:98:14:2e:e2:ac:0b:29:c6:14:c5:cf:
                    71:c8:27:44:c9:2a:d1:9f:60:e9:40:ed:fb:44:39:
                    16:ec:ee:e1:0a:16:da:ff:f5:45:71:52:aa:dd:23:
                    b0:54:61:82:f6:04:b8:d9:c8:a2:18:e7:3d:24:ab:
                    e1:6a:a6:68:06:8d:1c:cc:98:90:6f:41:b5:bd:1b:
                    f0:bd:70:70:6b:cb:21:85:f0:b0:b5:32:58:66:7a:
                    62:a1:61:71:54:17:fa:55:a0:d6:03:8d:12:b0:63:
                    bc:aa:70:5a:11:2d:7e:42:9f:11:10:9d:85:6e:88:
                    72:23:af:92:dd:d7:a1:35:79:ac:30:1f:8a:96:51:
                    aa:e6:46:d5:6b:fb:23:2f:4f:86:c2:ff:a1:bc:30:
                    3f:9f:ce:50:5f:88:c3:4e:96:9a:c1:15:c5:ff:a9:
                    c6:09:3e:70:a1:f2:2f:3e:32:95:e1:3d:f4:c6:b7:
                    c9:c0:df:e4:a9:15:f7:6c:fd:de:d4:fe:67:69:d6:
                    df:6b:8d:9d:01:89:ef:a5:ce:44:39:a7:a2:8d:b8:
                    30:c3:02:55:51:59:15:7a:ed:25:c7:06:44:f2:f3:
                    90:f9:c0:8c:46:ed:99:6e:df:1c:2e:0a:bb:65:e7:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:75:70:E7:6F:CF:93:99:17:83:F8:EF:F4:1E:06:65:CE:47:6F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:a4:87:6a:bd:46:f1:7e:f9:d2:ed:3f:b5:dc:f4:7c:e5:
         3b:7a:a6:74:ff:1c:47:8c:04:25:50:da:c2:51:ef:0a:67:66:
         3c:1f:40:6c:46:48:02:4a:15:9d:c4:3f:0d:3c:7e:05:5f:c4:
         d4:22:4e:60:fa:2b:44:22:b9:1e:d5:1b:b2:68:9d:a8:c3:bf:
         4b:9d:b2:ff:01:8f:68:fd:7e:fe:dc:95:de:84:23:3f:ff:62:
         e6:da:80:6b:81:7e:89:42:25:44:21:a1:64:af:9e:10:37:34:
         b2:e8:c7:d4:ba:87:7f:72:e1:24:56:7b:e8:94:f7:24:c5:78:
         13:3c:ad:35:bf:9d:79:a1:e5:85:2b:d2:a3:77:0a:0f:13:68:
         d4:f9:56:e4:79:5b:a3:1f:d3:5f:ce:3e:54:a0:7d:83:72:42:
         3e:79:04:84:a7:e0:ff:3e:45:a0:a7:b7:39:e9:95:b2:e2:64:
         e1:38:e8:fa:a8:03:1a:22:f4:6c:1a:fb:47:f6:cb:ad:6d:9d:
         5b:d0:51:3f:22:f3:a9:13:e1:6f:7a:26:c2:f0:5a:66:4a:35:
         38:03:31:b6:90:ae:be:35:08:c4:64:ca:03:e8:cb:30:36:da:
         73:18:22:fe:3b:9c:4c:dd:f1:8d:48:ec:30:71:53:3d:a5:94:
         f0:f9:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org