Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
File:                     7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json)
Hash identifier:          wBnhyMyeiTUThn+hdXft6jxr9P1EF+Z591ERifZcc4I=
Subject key identifier:   26:6B:FB:E8:CA:71:1E:CB:30:2B:20:07:69:28:5B:95:62:9F:4E:4C
Certificate issuer:       /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial:       010D0C9F4328584767062497CFD8193E33094940
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        209.240.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:24:97:cf:d8:19:3e:33:09:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=10c8321d-89b0-4138-b3e3-d8aa7aadc2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:f2:e5:bf:3d:26:dd:b5:e6:54:cb:e2:42:
                    18:d7:9e:2e:62:26:ee:72:67:8d:5f:36:f0:de:76:
                    1e:cf:2d:f1:8e:ee:e1:02:f7:56:79:c3:44:41:ef:
                    57:9e:9f:af:90:71:c6:5e:33:3b:e4:44:8c:88:bf:
                    8c:43:ca:b8:43:57:83:20:7b:98:2e:b1:2e:64:ca:
                    96:12:6d:53:94:cd:b6:75:25:ed:21:b9:95:ab:41:
                    8c:4e:fb:4b:18:45:ba:ee:07:e2:65:53:6a:de:df:
                    ba:87:59:98:b7:84:fa:10:03:40:eb:e9:37:37:62:
                    51:f4:c9:9d:e4:67:f0:de:36:1e:c1:4d:0b:f1:35:
                    05:7a:7b:a9:0b:75:52:7f:df:f9:7a:06:fa:de:6b:
                    de:6e:c0:b7:a1:bb:77:ed:0c:0b:5d:b1:09:fb:2b:
                    fd:08:d1:55:54:bb:ee:70:56:54:5b:42:e8:3a:a6:
                    05:51:7f:1e:ba:c9:61:60:33:fd:da:8e:b8:55:b4:
                    0e:d9:bc:dd:a7:50:1e:1d:a0:c6:2d:8b:5c:57:4b:
                    2a:b5:81:85:41:2c:4e:45:4e:3d:59:ca:62:45:e3:
                    e2:2c:89:9f:75:c6:54:14:ef:25:f0:42:8d:83:1c:
                    6d:ab:c1:3e:af:34:47:de:33:0c:10:13:70:28:09:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:FB:E8:CA:71:1E:CB:30:2B:20:07:69:28:5B:95:62:9F:4E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:b0:aa:e0:c6:c9:ce:f2:87:78:55:17:1b:4d:ea:92:e3:
         dc:50:0f:a7:86:f2:cf:a6:da:5c:31:f1:79:1d:99:20:3e:36:
         44:42:6c:f2:7e:8b:77:02:9d:b6:43:f1:ae:52:4a:79:7d:3b:
         50:b4:00:04:cb:bb:a6:ca:b8:61:f8:e7:8f:fc:1f:48:1f:16:
         16:44:2c:b9:04:30:42:1a:9a:e1:48:64:6a:be:ee:af:2e:15:
         7b:15:42:78:dc:f2:09:25:90:49:a3:da:92:f1:95:70:e8:dd:
         08:52:0b:68:75:45:20:f7:68:ee:9c:ee:b2:ad:6f:06:b2:d3:
         bf:9a:d1:ac:4a:45:3f:5f:17:30:ca:81:2e:04:73:be:71:3c:
         cc:e2:87:9a:5a:41:d9:ab:ac:ed:a8:19:5e:82:fb:e8:a3:54:
         19:ac:ca:f4:60:a7:64:9d:b8:b2:cd:df:5f:25:9d:3c:48:3d:
         32:97:48:4b:e5:62:7f:5f:9d:53:de:53:e9:04:4f:5c:6e:ca:
         08:f0:30:0a:57:38:8d:ca:fd:15:7c:b4:fb:72:60:d0:18:bd:
         f6:c6:30:ec:3d:06:93:b3:87:2b:ef:3b:43:43:66:ba:f4:64:
         04:2a:a6:02:ca:8d:f6:e3:23:c5:83:6a:2d:df:d5:01:9d:62:
         98:db:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:12 2024 by rpki-client on console-fra.rpki-client.org