Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
File:                     2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json)
Hash identifier:          fuuWg0Hdohwyi0s9iLeolsY78IWTbT4662dD7l6F+n8=
Subject key identifier:   B9:C5:A1:AF:E0:B0:46:67:18:3F:2E:9D:11:3D:A7:A8:36:7F:AE:49
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F432858479EDBD27F5641E6D2C311F0C0
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     53486
IP address blocks:        209.35.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d2:7f:56:41:e6:d2:c3:11:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=630bcef5-06d1-43e0-b7dc-ed8c56737be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:0c:d5:60:e4:94:ee:4c:76:ed:6d:3b:cd:
                    14:76:05:fa:0c:c3:84:6a:3b:d5:fe:3d:ff:96:40:
                    86:90:08:db:17:c4:26:82:8c:14:a9:b4:12:c5:9d:
                    20:ac:16:a0:fe:0a:01:f0:ec:21:d9:63:77:88:ec:
                    ed:39:99:59:58:07:bc:f3:24:fd:24:ac:28:22:70:
                    e2:02:cb:bb:ee:08:4d:37:40:5e:fa:b6:6c:62:f8:
                    0e:d1:16:c4:b0:85:f4:10:48:73:ee:22:3d:1d:6f:
                    bb:fb:47:0f:a6:41:a0:1d:e1:c2:3f:8c:ff:0f:b4:
                    42:76:af:04:83:34:aa:b0:3d:b3:bd:60:8b:bc:69:
                    a8:42:65:d4:ba:24:99:c6:a6:86:e9:8c:ef:f6:68:
                    7c:fc:bc:67:27:19:16:ad:98:ef:dd:bf:76:6b:27:
                    e7:af:65:1e:f0:23:56:d4:d3:83:26:12:90:bd:01:
                    9a:98:a7:ac:cf:27:bc:29:01:fd:cd:25:db:35:ed:
                    49:88:3b:e7:b9:ae:7f:41:63:ff:0b:2f:c4:c0:17:
                    b5:38:05:96:e1:28:99:5c:aa:93:8c:c1:6a:c4:d7:
                    22:67:60:ff:fb:74:23:81:1f:61:df:d5:7f:3b:86:
                    53:35:42:22:ab:23:fb:1c:b8:a4:8f:45:e4:59:44:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:A1:AF:E0:B0:46:67:18:3F:2E:9D:11:3D:A7:A8:36:7F:AE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:36:b3:fa:f5:3f:b3:58:fb:ae:83:5c:60:bd:19:04:88:10:
         6a:b2:b7:82:7f:69:eb:7d:9f:bb:bc:08:b2:d8:9d:e1:db:0d:
         8a:86:cf:61:de:10:ea:7f:0a:d0:df:7e:b8:df:a4:fb:f1:e3:
         9b:24:04:bb:6b:29:16:0e:33:d6:c0:73:3d:07:af:c9:89:d6:
         5a:33:97:e5:d5:6a:e3:13:a7:32:43:b0:d4:89:71:17:4e:07:
         17:92:01:f9:5a:83:d2:df:11:8c:7d:b7:b2:02:88:90:0d:20:
         4b:7e:91:35:25:51:14:b6:46:ab:cc:45:37:dd:61:2e:55:1f:
         f6:87:be:cd:50:74:6d:26:8e:e2:79:86:f9:91:25:ab:ae:66:
         66:d1:89:c7:d9:f5:f7:98:b4:c4:7f:27:c5:67:61:05:2d:8d:
         4b:92:b4:64:06:33:70:f0:db:96:f7:3d:82:9b:ef:00:3b:36:
         dc:5e:fd:b5:35:92:2f:d2:8e:f3:54:a5:f1:fd:fd:66:be:20:
         e9:fa:8a:cb:53:2c:1e:e0:3c:de:cd:1b:82:d0:25:02:c7:10:
         54:54:c7:e2:d5:16:62:af:bb:ec:21:ed:9d:b4:d7:65:56:c3:
         df:45:8d:d4:7f:71:ca:d4:12:7c:35:55:de:95:8f:68:8f:51:
         ae:1d:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:35:59 2024 by rpki-client on console-fra.rpki-client.org