Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
File:                     d41965f6-81e6-3659-8a3f-5c6056d921d3.roa (raw, json)
Hash identifier:          dVQviYIACThBxiizyExgft/pLfzC/Bd8fTbr+V30yXs=
Subject key identifier:   8F:D5:0B:FE:0A:47:91:58:01:F3:BE:80:4A:EC:4A:00:A9:DD:7B:3C
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBAB89D804362EA3164040
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        192.34.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ab:89:d8:04:36:2e:a3:16:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=cf39f531-426f-4281-b82d-e1abf094bc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:9a:19:29:89:00:70:cc:2e:9d:30:29:d7:
                    01:4d:fe:b0:f1:ad:4e:3a:12:47:5a:a5:cc:4a:87:
                    fe:5f:24:73:b8:a6:f6:94:18:d0:f1:47:04:f0:63:
                    41:4c:29:c0:09:45:41:e7:42:4a:3e:dc:dd:b6:e3:
                    84:d8:90:d2:1d:4c:28:22:e8:89:82:1e:5f:ef:af:
                    a0:ba:48:52:52:36:be:77:ae:31:e4:f7:78:1f:67:
                    0b:1b:69:88:c6:19:a4:28:12:9c:b3:be:13:91:5d:
                    d7:ff:65:d7:ea:f5:1c:f1:4b:a9:8f:15:67:64:47:
                    43:29:e6:c8:b7:96:33:d2:09:8c:69:17:a0:5f:6d:
                    62:92:91:5d:e3:4c:46:d9:3a:ea:39:b4:34:41:db:
                    a9:06:2e:9a:31:b0:47:d9:65:60:fe:9a:a8:4b:8d:
                    e1:09:b7:9d:9c:bc:5a:ec:3a:41:1f:43:71:e1:e7:
                    ba:db:1b:07:d4:97:98:8d:aa:54:14:e7:d8:7c:90:
                    30:36:8d:c9:21:0b:df:d9:8b:4f:aa:b6:cb:9a:20:
                    53:c1:23:20:06:73:7b:cb:24:ae:eb:c8:bf:4f:4b:
                    00:09:86:81:41:d8:1c:27:a4:a4:50:75:4c:f7:58:
                    1a:bb:c7:34:70:e0:55:ad:f2:f1:af:f0:09:3e:cc:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D5:0B:FE:0A:47:91:58:01:F3:BE:80:4A:EC:4A:00:A9:DD:7B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:ac:8d:67:4f:66:ce:ff:41:93:80:82:96:ea:58:6d:d8:
         f9:20:a4:77:ea:93:d9:02:7c:1e:1c:17:9b:15:e9:42:07:7c:
         f9:8b:94:e1:a6:eb:27:ea:f6:fa:d1:9f:b3:d7:2a:27:58:8c:
         d9:d0:17:e9:ad:f4:c7:c9:c2:2c:ab:ca:82:c8:29:2e:90:0c:
         bd:cf:a3:52:20:c1:16:da:ae:58:4a:4a:48:65:50:76:67:96:
         2f:5e:80:47:23:3c:0f:ff:3c:8f:bc:e1:05:9d:41:7c:17:c6:
         88:c7:1c:d5:56:2d:8e:f3:bf:56:3f:79:41:69:c8:a2:54:01:
         47:e1:fb:18:56:a8:09:31:b8:73:f8:88:fe:a5:6b:9b:e5:23:
         80:29:62:14:b7:fd:3a:c2:0d:87:d6:38:0c:a3:d0:90:e9:67:
         3c:a0:5c:65:3a:99:75:a2:f4:e4:a1:00:9b:ad:1a:16:39:8f:
         70:7f:98:48:a7:1d:85:d7:95:e4:5b:a6:48:ed:84:5b:3d:be:
         a5:5c:8b:4b:e9:7d:b9:3f:a8:c8:ca:aa:ba:33:22:dc:8e:43:
         7f:93:b1:da:74:37:1a:59:36:4a:11:cf:da:00:b7:5a:d1:52:
         d4:3c:14:2f:df:3b:ca:95:6b:3e:ae:a0:87:80:4e:c9:d6:b6:
         bd:e0:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:17 2024 by rpki-client on console-ams.rpki-client.org