Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
File:                     8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa (raw, json)
Hash identifier:          NoKfcJSYjG891hfqLJFL656XuFif78C6fQC0D9Xz6SQ=
Subject key identifier:   0C:35:1C:DD:AF:7F:6E:1D:FA:3B:F5:07:11:7D:B5:B2:DC:C1:10:D7
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F432858478E1BCB6FADEDB37CA02B46C0
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     3464
IP address blocks:        216.109.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cb:6f:ad:ed:b3:7c:a0:2b:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=158da042-dd26-4031-9fd0-203e6909599a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:f8:af:7b:d1:bd:b8:db:72:10:5d:4f:e0:
                    1d:20:0f:9f:2b:9b:f9:a0:c7:74:a2:2d:12:66:dd:
                    db:03:15:6c:c4:54:43:dc:ae:d8:a4:9c:9a:07:42:
                    7d:0e:c2:4f:b5:95:54:ae:31:f4:b7:ab:32:3a:33:
                    d8:4b:8a:27:43:9c:29:97:cb:2d:b7:a7:0c:a3:a2:
                    19:6a:74:fe:ca:70:7c:41:97:59:0a:54:76:bf:50:
                    b9:1a:23:98:ff:03:2a:f2:eb:ef:03:f1:6d:58:ac:
                    3d:ea:6b:bf:07:5c:e8:bd:a3:b6:6f:27:7b:c2:90:
                    c2:40:84:32:ca:f8:8d:ab:86:3b:55:13:1b:de:41:
                    54:2d:1c:3e:1b:8a:d0:f1:2f:5d:ab:8a:0b:d1:90:
                    1e:22:98:62:3b:f3:69:14:da:17:7b:2e:aa:e3:60:
                    7e:65:56:1b:2b:1b:db:7c:34:ca:f5:ef:50:28:cf:
                    32:45:d7:2c:5c:9b:5e:d8:3f:c9:65:c0:e0:fb:9e:
                    dc:3e:79:4b:17:da:ef:17:1e:55:0d:f6:91:b9:c9:
                    a3:39:af:d4:7c:d5:93:35:09:c3:ce:b0:86:78:b2:
                    1d:5c:2b:cc:b5:59:e7:4d:30:a9:fc:93:e5:ec:ec:
                    e2:77:4a:2e:ca:a0:60:e5:52:4f:18:3a:c5:5c:93:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:35:1C:DD:AF:7F:6E:1D:FA:3B:F5:07:11:7D:B5:B2:DC:C1:10:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:19:c9:61:47:f3:3c:6b:0e:e8:d6:4c:21:d5:f7:20:7b:8c:
         d0:3b:4a:9d:de:55:89:30:79:05:53:f4:41:67:1f:0b:8e:7d:
         54:81:61:17:d8:33:eb:09:b6:53:35:49:72:af:be:85:ac:ae:
         d0:5b:95:0c:0d:73:2c:62:af:59:a7:e7:d6:c6:5c:d6:61:c4:
         17:6f:0b:85:b1:9d:a2:06:86:82:2e:f6:ca:c7:ec:a0:8b:3f:
         45:1c:30:f4:f9:12:71:b1:99:8e:6d:69:84:b6:af:1a:e7:43:
         aa:66:18:2e:35:93:04:71:45:fb:86:e3:aa:ea:cc:79:7e:68:
         97:59:cf:27:58:28:c5:cb:e4:91:dc:31:97:1d:ff:91:e9:e9:
         40:1f:02:74:39:ad:d4:37:36:96:a3:ac:9f:56:4d:87:84:09:
         f4:dd:19:ca:c4:3f:a9:05:d3:54:4b:6e:fe:18:0e:b6:3c:3f:
         ae:42:de:d2:98:02:ee:80:52:e0:a6:5f:36:c6:f2:89:2f:d9:
         0f:83:7d:5c:e7:e0:83:62:e5:d9:72:f4:f6:fd:82:9f:48:44:
         7d:6b:68:b9:04:fb:f7:c1:4f:36:d5:d8:d2:20:c6:12:7a:31:
         42:a4:cd:84:35:fa:83:06:ef:c7:f9:88:3c:e7:90:9c:39:b0:
         0d:3f:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:31 2024 by rpki-client on console-ams.rpki-client.org