Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa
File:                     bcbb36b3-d8e7-31a4-a360-085363e54218.roa (raw, json)
Hash identifier:          SGOVVqXthbUN6KrxUT+xL4ZxZ7zUKFgsdJDVG8N7NiQ=
Subject key identifier:   23:B1:E8:69:47:83:1C:C3:97:27:58:22:D5:62:A2:E1:38:D6:27:A6
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858473D25E4AC46BEB51E4CF21CB0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     6453
IP address blocks:        64.86.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e4:ac:46:be:b5:1e:4c:f2:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=8b882ead-6570-49a4-b269-34ca4d1ca5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:cb:a7:dc:ef:9b:93:01:b8:71:17:86:7a:
                    0e:2e:83:16:a0:bf:a3:be:04:5e:80:7a:80:61:68:
                    d5:5a:95:3a:9a:d9:e9:af:8a:f3:ed:0d:17:86:69:
                    db:eb:3a:57:71:9d:f8:a3:3c:28:04:df:44:a0:b6:
                    c4:dd:d7:5e:20:4c:71:46:e9:f9:65:6d:97:11:2e:
                    48:87:36:af:b5:0b:f3:3c:95:a8:03:d1:0b:05:12:
                    68:cf:0d:d7:ec:dc:fa:e1:0a:44:1e:cb:f6:a6:ee:
                    2c:09:d7:e1:0d:d8:5b:07:93:7e:54:ce:5d:af:ba:
                    16:2d:72:25:14:3b:d6:c6:71:33:27:7c:94:21:ec:
                    b9:90:6a:c3:fe:66:dd:6b:e6:fc:00:07:34:fe:01:
                    ce:10:41:99:b0:ba:6f:c5:22:ca:d9:fa:f0:27:c7:
                    85:4a:d6:1f:fb:d2:39:b5:ef:a3:55:a7:e3:6b:a3:
                    cd:1a:ef:fa:01:04:72:0b:c6:85:88:07:6c:c2:00:
                    41:60:52:1d:df:78:a2:a8:c6:11:18:3c:1b:d6:43:
                    af:1a:cc:60:76:35:b7:28:46:36:18:a7:7b:74:a8:
                    3f:98:84:09:76:aa:33:b2:0f:3f:38:a0:49:68:bf:
                    6e:55:92:99:8e:de:50:f1:f5:7a:b5:79:4c:fd:e9:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:E8:69:47:83:1C:C3:97:27:58:22:D5:62:A2:E1:38:D6:27:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:73:8a:5b:e5:ba:51:14:b9:1f:78:1d:c8:83:65:1d:40:9e:
         fd:b1:80:bb:73:2e:bc:29:8b:1c:c7:30:b3:2d:64:d3:0f:d0:
         a1:c7:b2:17:96:8d:f5:8a:47:e5:37:cb:0d:bf:fa:7a:67:81:
         03:57:46:a9:d2:12:e9:70:47:40:99:0b:9c:19:02:ac:e8:89:
         c0:33:70:6e:7d:bf:c7:ec:95:ff:32:11:73:2a:fb:8a:21:9c:
         fb:a9:60:00:4e:57:87:00:f4:0c:fa:04:ee:3c:c7:83:a4:d9:
         3a:e8:42:34:42:de:ee:e5:be:ba:d6:d3:bd:3c:6d:51:d2:57:
         64:1b:fc:b8:a3:af:d5:63:5b:3a:34:ab:04:89:1c:c6:d7:ac:
         33:67:64:d7:c5:ca:ac:bd:16:b8:3d:0b:16:e5:8f:bb:90:93:
         5d:ea:2f:7f:e2:96:30:3e:f2:be:cd:73:ee:87:9c:c9:c8:c4:
         9e:85:dc:fa:c3:bb:6d:a0:02:72:29:bf:4e:3d:b2:63:50:0d:
         9b:e0:7d:24:9c:51:eb:f3:9a:a7:ef:66:26:8f:b8:fd:0b:1f:
         a7:1f:73:04:bc:11:3e:82:95:f6:b8:bd:73:4e:14:31:3f:c8:
         10:f9:e6:69:93:56:f8:6f:d3:4f:1e:85:3b:0e:92:e0:81:79:
         1a:46:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:02 2024 by rpki-client on console-ams.rpki-client.org