Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
File:                     c21abfa5-eb96-3f30-bc67-c4138423851d.roa (raw, json)
Hash identifier:          QU9QanHRmqqtLmh2sJgDo5es2/0fHQgpTZStvGREzyQ=
Subject key identifier:   DB:7A:1E:8C:59:EF:7F:FE:60:09:85:58:19:1E:DD:30:18:63:75:66
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F43285847E62A295CD0D1F9FB5784BB00
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     400765
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:29:5c:d0:d1:f9:fb:57:84:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=45a108d6-1514-49b6-904e-5a003d7524e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:11:4f:e9:5b:12:f9:29:1b:b8:12:b9:75:
                    71:c9:de:47:4f:06:5d:26:0e:1f:98:17:c1:55:e5:
                    41:17:e5:85:9c:6f:63:57:d6:10:25:c0:c7:24:f5:
                    ac:88:aa:4c:6a:3f:17:bd:ea:ef:fe:8d:3a:29:e6:
                    df:b8:9d:08:e1:e3:d8:ad:7c:ec:9d:d5:05:43:04:
                    f7:13:97:ad:73:4b:f9:d0:55:bd:63:f0:23:3a:c1:
                    14:58:a6:b9:cb:75:07:b3:6b:71:7e:cf:5a:8c:e5:
                    9a:cf:89:f9:e0:86:77:ed:e4:62:c7:82:3f:70:57:
                    8a:f3:b4:9c:2e:b0:61:8a:ac:c6:9a:10:e6:dc:63:
                    bb:6d:64:d4:f2:6d:47:4d:ad:c9:a3:b9:f9:ab:45:
                    da:4b:56:bf:ac:23:f0:4d:21:42:67:4f:60:98:b6:
                    8b:7f:78:e1:00:c8:7f:73:6d:73:3c:e6:b9:d3:c6:
                    7a:46:4e:88:5e:76:80:db:f8:76:8c:0e:47:7f:9b:
                    0f:b1:29:42:99:77:32:7d:00:77:29:52:4d:a9:78:
                    cd:a4:83:ed:0b:01:a0:96:6a:5d:10:9a:b3:54:a1:
                    9a:64:4e:ce:a6:ed:ea:76:fd:45:4b:5b:03:9a:cd:
                    a9:9e:1b:d7:c2:b1:85:69:6c:6a:b7:91:88:20:1e:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7A:1E:8C:59:EF:7F:FE:60:09:85:58:19:1E:DD:30:18:63:75:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:93:5b:f7:d0:8c:79:b3:69:ea:1e:b5:f3:bc:48:d1:8a:
         a5:92:91:8c:a7:0c:32:a0:82:27:97:d9:ee:23:69:f1:1f:44:
         42:64:7a:fa:51:61:a7:de:7b:59:85:57:f3:7f:90:1b:22:fe:
         e2:2e:25:65:6b:18:1b:55:a7:8e:11:56:8c:47:a7:1a:b0:81:
         3d:1e:8f:69:bd:19:bf:9e:71:49:34:b7:46:68:28:fe:1f:6d:
         47:70:3e:01:d8:8a:fd:90:55:21:a3:91:bc:fa:a2:fe:e7:bc:
         f0:28:2c:d4:5b:07:41:24:b5:ae:c4:56:96:c2:b0:00:5e:1c:
         12:75:09:c7:2b:28:bf:d7:0b:38:86:c9:f4:4d:e3:64:8f:71:
         4a:37:9d:3d:44:7f:9c:6f:09:ae:46:e4:5d:c1:94:d5:2e:ab:
         e5:6f:f9:e7:36:8e:0a:79:4a:0b:c0:67:e9:8b:93:3b:62:ee:
         4d:a6:2c:2f:10:cb:1c:98:4c:ca:d6:43:f9:c2:8c:72:b1:4c:
         06:b2:c6:bc:10:c6:69:1e:34:10:b4:1a:c1:2e:a2:03:6b:4c:
         3b:6a:64:e9:4a:3a:31:3d:29:58:62:2a:e5:f8:5f:b9:91:3f:
         7c:5e:72:60:9b:37:0e:17:9e:10:12:65:bf:0a:43:14:3f:58:
         6a:e6:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org