Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
File:                     7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa (raw, json)
Hash identifier:          QZNA9pblgSSrK9sg/olc6CA4FwzNNCJaAcuLgroEGUU=
Subject key identifier:   4C:A8:76:51:BF:97:7B:E9:74:57:FE:40:13:9F:E4:4F:DD:8C:3C:B6
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F432858479EDBD0DE76CA590E7FE4DF40
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     53454
IP address blocks:        162.248.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d0:de:76:ca:59:0e:7f:e4:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=df95ec30-652e-4cfe-9c7f-73954ea2ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:d4:e7:c2:1d:9b:7e:fa:6a:5d:a8:d3:55:
                    d1:82:29:aa:71:2a:f0:02:de:25:aa:82:34:cc:4f:
                    e3:cb:85:29:14:56:58:91:e1:1c:30:14:63:ce:a0:
                    41:3f:71:2c:b1:46:fe:d4:72:84:80:4a:22:89:5b:
                    db:ce:86:b8:be:d1:0f:5f:c3:61:75:e1:63:6c:e3:
                    c0:a0:62:a7:ba:9c:77:24:f2:7d:b2:f7:89:24:ce:
                    fc:e7:f7:a1:a6:46:e4:b7:9d:e8:cc:73:04:57:90:
                    9f:d0:7d:38:61:04:b3:b4:a2:eb:92:2a:0b:8f:2a:
                    15:ab:30:05:23:a5:69:2b:1c:7e:ae:8f:fe:c5:e7:
                    c4:74:6a:a8:27:37:72:38:00:ec:ed:a7:9e:67:77:
                    86:fe:cd:58:a6:6f:56:45:25:bd:d0:fb:95:de:44:
                    87:36:9c:31:11:20:aa:da:63:9a:0c:2a:88:24:03:
                    37:56:8a:20:d1:d4:19:3f:92:6a:36:44:b4:9a:55:
                    23:e6:2d:a6:cd:fc:cd:6a:b8:1b:9c:d5:9b:13:a1:
                    3d:e0:29:3b:4d:0c:6b:9c:a5:c0:ed:7e:1e:ae:0c:
                    de:95:da:26:0b:45:29:4d:22:65:c7:63:0d:61:b6:
                    c3:d7:90:8e:1f:6b:d9:71:f0:67:f7:4a:27:4e:a9:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:76:51:BF:97:7B:E9:74:57:FE:40:13:9F:E4:4F:DD:8C:3C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:e9:97:c8:15:0f:d8:30:91:db:e7:e0:b8:2d:f0:12:d1:
         59:37:9b:2f:78:c6:e4:ae:d8:6e:3b:4f:ad:ab:41:68:66:8a:
         97:1a:f4:a0:8b:8c:1d:a5:df:6e:b3:a1:27:7a:be:23:0e:5e:
         cb:91:8b:ac:a9:07:50:09:a2:87:64:01:6d:44:fd:04:54:3d:
         5d:d1:89:a5:9e:7d:a7:9c:56:47:be:c8:16:ba:86:b8:c5:54:
         44:df:fd:b3:8b:2d:6e:01:a6:85:40:f3:6a:13:1d:cb:11:77:
         26:98:3f:e9:ad:8c:95:48:fd:e7:ab:fd:29:c7:e1:21:58:b5:
         28:b2:3c:f4:30:d2:8f:b1:c7:25:2f:8f:25:ee:7a:de:77:36:
         29:3f:94:c8:5b:10:69:4f:fe:dd:bc:06:d5:15:ca:8d:a0:2b:
         9f:d2:76:58:c7:1a:69:64:48:7f:59:a8:a3:02:83:47:b5:9f:
         fb:f2:f9:4b:5c:e9:e2:8c:8e:85:0f:9d:60:10:ba:95:34:cc:
         96:3e:0f:fb:39:35:67:d7:dd:d2:3c:7d:7d:b0:5b:f8:bb:44:
         59:9f:14:71:c1:8e:e6:25:7b:89:8d:98:48:7f:4f:b0:2f:ce:
         5b:0e:eb:37:e3:24:ef:f3:a4:cb:d0:d4:c2:54:75:1c:8e:2d:
         1d:9b:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org