Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
File:                     65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa (raw, json)
Hash identifier:          l8Yv+NjXyjb4pOIT2Euwls84c4fYGuNAMVrKTDiUqF8=
Subject key identifier:   C7:0E:89:5B:B0:F9:21:80:97:CF:A9:BD:82:C7:0F:09:55:D3:8F:A4
Certificate issuer:       /CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
Certificate serial:       010D0C9F4328584720FC913E42BF34931092B480
Authority key identifier: 04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
Signing time:             Fri 06 Sep 2024 22:54:43 +0000
ROA not before:           Fri 06 Sep 2024 22:54:43 +0000
ROA not after:            Thu 05 Dec 2024 23:54:43 +0000
asID:                     14380
IP address blocks:        216.151.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:fc:91:3e:42:bf:34:93:10:92:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
        Validity
            Not Before: Sep  6 22:54:43 2024 GMT
            Not After : Dec  5 23:54:43 2024 GMT
        Subject: CN=7ec96012-88cf-4ff7-a0da-e51a15f7bb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:a9:08:9d:7d:8e:c8:30:b9:f9:86:25:77:
                    b7:42:5e:00:b7:c0:69:bd:1c:95:26:41:0d:93:54:
                    47:03:68:26:1c:cc:61:c2:01:08:cb:42:50:f7:d3:
                    5f:e0:46:db:0f:0a:4c:b9:2a:b3:47:aa:eb:86:15:
                    b9:a1:ff:08:10:4e:fd:81:02:37:a6:b0:97:a0:3e:
                    90:36:e6:53:d5:38:8c:3e:2c:ea:36:80:48:89:19:
                    95:48:f9:34:ce:f3:a8:f9:be:c1:e2:3f:ed:77:76:
                    9a:2a:c8:8f:41:28:f7:8c:ba:ee:bf:18:70:b5:8a:
                    26:5d:b0:84:12:e5:6b:3a:c4:84:8d:98:31:1b:1f:
                    bb:76:e6:db:a0:c3:56:9e:8d:96:bc:50:8c:32:93:
                    22:48:e2:f8:91:27:fd:26:ed:aa:aa:76:43:89:1b:
                    b1:a7:64:fd:01:fa:10:03:dd:df:2d:7f:63:cd:3b:
                    dd:14:77:5c:dd:5d:6e:d1:48:fc:64:14:cb:2c:a8:
                    80:ba:ec:1e:8a:9e:91:5e:33:db:7a:17:81:9d:3b:
                    88:80:2e:c9:e5:bf:5d:f9:58:bb:61:97:a4:20:1d:
                    28:42:13:56:76:0f:6b:6a:e7:fc:9a:65:33:5f:61:
                    ed:fc:0e:43:89:e9:cb:65:eb:d9:1d:45:4a:19:88:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0E:89:5B:B0:F9:21:80:97:CF:A9:BD:82:C7:0F:09:55:D3:8F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.crl

            X509v3 Authority Key Identifier:
                keyid:04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:c8:f8:db:e0:fd:19:33:44:b2:6a:79:87:20:35:9c:c4:
         b3:9b:46:11:c0:7c:df:fa:7d:43:0d:b1:ba:20:90:48:f8:39:
         15:e4:18:a8:7b:cd:21:50:8d:45:34:4f:3b:d1:61:19:01:52:
         75:6d:86:e4:e4:18:06:55:22:b7:b3:5d:45:f9:f4:c8:dd:08:
         91:40:0c:14:f0:eb:13:2b:a7:61:cf:fb:85:16:c0:01:8a:74:
         3e:0f:36:d4:54:f2:db:e9:45:21:56:11:a0:35:b1:49:c2:b2:
         9c:1c:00:82:66:82:93:7e:b6:c5:82:38:db:07:51:4c:7a:f2:
         ae:bb:e4:c5:90:97:c6:d4:b5:5d:6c:2e:16:82:a6:63:0e:1d:
         06:14:42:2d:b4:51:16:2a:72:b0:0e:e2:c6:04:01:74:03:80:
         4d:39:4f:94:37:74:53:3c:19:e5:bb:85:79:a4:61:6f:da:7c:
         32:03:41:5f:91:15:e9:3e:39:28:a4:15:5c:fe:46:18:3b:fd:
         42:a3:60:46:3d:48:ca:c9:40:a3:2e:cf:1f:9f:0d:7d:2f:e7:
         30:80:58:8b:62:3d:88:d8:84:3f:4b:7c:09:34:cc:76:ff:66:
         dd:a1:b3:00:5c:4a:7c:7c:7e:63:fc:0a:31:bf:9e:23:c7:8e:
         d6:ac:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:28 2024 by rpki-client on console-ams.rpki-client.org