Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa
File:                     3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa (raw, json)
Hash identifier:          h0DBaOyl/fFXuntRvhyT0Ar/lFk1xqLQ53jr1MQFG2s=
Subject key identifier:   20:B9:7C:B8:70:AD:8D:B3:73:33:56:42:F0:B6:21:E9:42:7C:94:27
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF3FF56B0C1EBDAE575700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        209.53.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:3f:f5:6b:0c:1e:bd:ae:57:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=792a5e3b-a693-493d-8bbb-d84dd257dc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:6e:eb:ac:f7:09:c4:43:a3:a4:44:af:bd:
                    00:d1:56:09:26:b4:27:a8:c7:98:c8:7d:56:a9:e2:
                    3a:44:05:8a:12:e3:21:19:07:7b:17:2a:6c:a4:ca:
                    d3:9c:ff:0c:a6:bf:38:7d:af:7f:6e:47:d4:10:92:
                    d9:5e:93:ef:a7:df:8e:56:7f:97:b3:34:49:19:74:
                    d9:ee:9d:fc:4c:64:19:1b:4c:82:1d:89:fc:6d:35:
                    aa:e5:da:ea:ef:0c:6e:6d:94:f3:53:07:8d:0f:fa:
                    3f:cf:92:12:d1:b5:d3:62:fa:8f:14:bc:b7:e8:d9:
                    4c:11:c9:39:cb:8d:b8:17:2a:0b:50:9d:94:c3:44:
                    36:cf:16:2f:8e:93:60:6c:e6:2a:4f:58:be:fe:26:
                    e7:03:b9:ba:81:10:13:91:42:2d:66:c8:80:c3:be:
                    b2:7e:e7:e9:aa:ff:88:2b:ff:67:71:6f:da:a7:16:
                    7b:dd:70:99:41:cf:5d:e7:64:04:1c:fe:46:e4:54:
                    08:ba:76:23:cc:72:e6:4a:87:b0:2f:ac:49:f5:dc:
                    94:e5:fa:8b:19:ca:a2:73:09:c3:1e:ba:55:11:5a:
                    33:2d:eb:02:f4:37:ed:f2:ab:b1:6c:e8:d6:80:29:
                    5a:3c:3d:95:3b:78:48:59:20:9c:d1:d9:1d:c1:60:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:7C:B8:70:AD:8D:B3:73:33:56:42:F0:B6:21:E9:42:7C:94:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:50:1c:60:af:61:0b:6b:47:46:9d:3e:ee:65:d6:4e:c2:
         05:9b:5e:8c:28:62:46:c6:b6:4c:12:1d:e8:bb:b1:31:ec:35:
         c0:08:7e:fb:18:86:09:3d:dd:2f:93:58:1e:9c:1c:74:2b:ed:
         90:41:73:c9:1b:a5:7a:ce:ed:d8:44:66:cd:d1:c7:b2:36:ad:
         3e:7f:50:d7:ad:83:93:c3:08:ac:f3:59:dc:17:e5:9f:37:5d:
         15:fb:0b:73:5f:6d:7a:e3:de:db:d9:95:9b:d9:7f:6d:ed:42:
         58:e9:f4:3d:5e:37:f9:8e:b9:d4:46:26:68:96:74:db:87:85:
         ba:d8:0e:0d:2f:6f:ad:5f:b3:8f:a3:ce:43:22:94:76:3b:8e:
         94:f7:7d:f5:2c:9b:15:1e:d7:18:90:35:2a:f6:19:a0:fb:2c:
         7a:3a:a0:a5:ce:3c:92:2e:5f:8d:6f:51:93:2b:99:da:68:70:
         d7:a2:40:93:67:21:80:21:a1:d2:a2:4d:d8:ad:75:fb:ea:ca:
         2b:ab:d4:b6:7e:07:92:e6:b4:07:d5:4c:7f:8c:99:7e:49:57:
         f7:26:61:bc:c2:de:04:a0:fe:a0:6a:ad:1f:94:11:91:20:1e:
         b4:0c:4d:82:55:46:54:db:59:b3:a5:65:a8:a3:74:e2:58:39:
         b7:c0:dd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:55 2024 by rpki-client on console-fra.rpki-client.org