Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d7c9a2c-59a3-329f-9370-7eaac65cc6b5.roa
File:                     6d7c9a2c-59a3-329f-9370-7eaac65cc6b5.roa (raw, json)
Hash identifier:          ADwghNHEorl102Et5vDkyEfuHfItPl+DiUaYkixtFkg=
Subject key identifier:   90:AC:AF:31:66:3C:43:8C:E9:96:90:70:A7:A3:8B:9B:A4:F2:05:7A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C4B5A738730CCB7D4488
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d7c9a2c-59a3-329f-9370-7eaac65cc6b5.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        216.41.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c4:b5:a7:38:73:0c:cb:7d:44:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=cfd90906-fcc1-4dd6-b5ee-bc06c049743d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:9b:a6:38:08:94:72:b5:f2:24:6d:82:72:
                    55:02:5e:a8:51:1a:8f:b4:fa:e4:48:1e:9a:08:99:
                    d3:f6:52:58:fe:5c:51:a7:0b:7d:bc:80:25:45:17:
                    8e:0e:ca:12:51:69:aa:8f:63:20:34:93:51:12:21:
                    99:52:41:83:a8:16:03:74:51:92:2a:55:a5:e0:0d:
                    f1:cf:23:69:e1:7c:4d:fa:1a:37:c1:5f:63:7f:7c:
                    49:47:97:5f:af:3c:4c:ac:90:46:38:25:bd:29:04:
                    cd:64:79:de:1d:14:aa:c8:13:86:24:1d:95:b0:7a:
                    8b:74:d9:60:8b:c9:f6:c5:14:aa:cd:0a:f5:1e:77:
                    0b:03:d6:d9:0f:7e:f8:ab:28:0f:04:06:4f:d8:a9:
                    9a:61:ef:3d:f8:d7:a1:2b:41:64:c6:f1:a8:50:11:
                    ff:b3:1e:1f:3d:98:99:0a:01:60:1d:0e:c4:92:39:
                    61:4a:d8:39:00:b7:05:11:5a:75:b7:19:95:8b:21:
                    98:02:3a:3e:72:e9:11:76:3e:09:5b:ac:f0:05:14:
                    15:72:5e:ea:79:4f:8f:fd:97:fc:50:4a:bc:7f:8e:
                    0f:44:d9:3a:5c:51:d7:b1:a5:2a:8f:91:f7:95:69:
                    c2:52:65:51:4f:3e:74:46:9f:99:5d:f0:52:ac:71:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AC:AF:31:66:3C:43:8C:E9:96:90:70:A7:A3:8B:9B:A4:F2:05:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d7c9a2c-59a3-329f-9370-7eaac65cc6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.41.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:70:85:f6:12:9f:93:55:cf:2d:4f:bf:9b:ce:c5:9d:70:05:
         55:82:6a:56:f3:60:d1:8a:48:f5:cd:68:d4:04:b2:ae:f8:33:
         27:71:e2:0d:1a:7f:55:ba:03:26:e8:b7:7e:b9:a5:cd:8e:6c:
         7d:cd:2c:b1:ef:e7:a9:56:bb:e0:3f:7b:4e:f4:64:40:cf:22:
         9d:ac:ba:0b:1c:16:4a:19:bd:fa:23:f0:9d:14:b6:7b:13:05:
         74:c6:7f:26:45:fa:8a:e6:90:38:12:c6:49:79:27:25:87:6d:
         60:3b:b5:53:97:32:67:09:cc:b6:1c:6f:ff:18:2e:1c:f3:0b:
         db:92:2c:fb:48:bd:68:29:67:85:ab:23:0a:71:2d:59:cd:3c:
         f3:eb:04:54:ca:71:90:6f:90:8b:44:3a:b7:6f:c3:e7:2c:50:
         4a:48:45:68:1e:d3:04:80:f1:a1:98:6d:e8:16:59:0c:4d:de:
         3e:dc:0c:e1:ca:85:22:5a:21:ae:66:a2:3b:75:d6:97:81:2d:
         fb:97:bd:bf:0f:97:66:ef:7f:46:47:7c:a5:d3:72:bb:49:e9:
         87:df:25:16:6d:6a:07:7a:97:18:4a:be:87:d6:07:4a:96:25:
         3c:e1:52:49:d6:a7:a3:ec:bd:c8:cd:cd:19:b8:ea:02:9d:03:
         7d:de:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org