Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa
File:                     f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa (raw, json)
Hash identifier:          F3oxcUILINcpbFb66f42aml8qRjJeFnHpIZo+yS94z0=
Subject key identifier:   F0:19:C2:8A:54:82:3E:36:25:32:F0:99:B8:AB:E9:D5:68:1F:BB:C1
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F43285847B531569BE19A02A43CD38299
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     36184
IP address blocks:        205.167.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:56:9b:e1:9a:02:a4:3c:d3:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=6e5f9e07-2c62-40f8-9109-e46fb8caed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:59:24:39:db:35:e3:7d:6c:de:99:68:1f:
                    39:dd:23:86:60:ad:f0:d7:77:e6:23:9a:6f:5b:0c:
                    f9:a6:39:14:47:f8:84:29:63:17:19:03:0b:34:47:
                    b3:a7:63:3e:64:74:c3:f0:40:6b:e0:31:48:ec:b7:
                    94:34:14:4a:5e:00:56:a9:68:0e:ff:cf:21:ec:eb:
                    23:b7:b8:35:27:fc:fc:79:dc:3b:1a:a1:1d:b4:85:
                    9e:b3:a5:58:20:e1:78:95:a1:a0:24:de:39:b0:00:
                    c0:4e:28:f0:f7:c8:b9:73:66:a1:99:2f:22:7a:98:
                    56:2c:33:07:5b:44:0d:cb:85:81:58:a9:7c:2b:5d:
                    23:ee:e1:e5:41:93:11:22:17:8f:0b:a3:f6:cd:ce:
                    66:d0:62:85:20:f4:a2:0b:3b:c4:68:98:89:8c:c1:
                    2e:b4:6b:47:ae:c5:31:4e:36:ed:d1:44:f9:10:6a:
                    11:8a:e4:05:54:58:6f:be:70:5e:79:6d:90:e6:eb:
                    c5:00:ce:ab:51:a4:6e:f6:d2:c8:aa:b0:b8:04:01:
                    88:ac:80:ca:6a:7e:8a:f3:bc:9c:65:60:17:bc:b3:
                    ec:83:cd:56:fd:f4:cc:7f:0c:9f:ba:11:27:8c:5d:
                    9e:73:46:ca:d3:f6:3f:66:14:79:5e:a1:4d:93:0e:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:C2:8A:54:82:3E:36:25:32:F0:99:B8:AB:E9:D5:68:1F:BB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/f1cc2f90-2e78-3c54-b79b-cc103be31fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:ec:c7:9a:56:ec:56:36:11:ca:4f:5e:59:e6:16:f3:00:
         af:a6:7f:ca:fe:af:f8:a5:90:f0:03:69:ff:11:48:cd:d0:b0:
         04:6d:2c:74:c9:bf:28:44:9c:d7:54:85:f7:79:84:35:01:4b:
         47:d6:4a:2e:ba:b5:36:75:ff:6b:a6:e6:b0:41:c7:98:a8:0b:
         8c:b3:03:d8:e0:40:ac:58:1e:06:1f:54:1a:67:4a:65:f1:73:
         60:94:7b:8d:5b:22:bc:e9:a6:77:bb:d4:d2:80:cd:26:b6:d7:
         d3:f5:4e:67:11:e6:91:4c:d3:48:f9:19:4b:8d:af:3c:7b:5c:
         a7:9f:58:68:3e:cc:ea:42:f5:4a:32:dc:8a:cb:11:0e:c4:e9:
         a2:2b:29:a5:90:fe:d4:4b:eb:85:21:94:e3:f1:ad:c1:9c:8b:
         ac:4a:48:ed:d0:ba:5e:54:4f:4c:bf:bf:f1:00:ff:e8:6b:2f:
         e6:2a:05:25:93:ff:a9:d0:4c:f1:86:4e:a7:a3:dc:91:0d:94:
         32:77:3f:65:19:23:d3:af:0f:06:65:64:ab:09:41:d4:68:46:
         8c:fb:2a:48:1b:5b:79:d2:de:c8:95:0c:4a:7e:c2:78:bc:5f:
         df:b8:3e:1e:bf:17:eb:80:ac:9e:49:c0:91:d7:a2:f5:49:ce:
         f4:3b:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:27 2024 by rpki-client on console-ams.rpki-client.org