Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa
File:                     6d383822-d442-3445-a1c1-3de9ce886d09.roa (raw, json)
Hash identifier:          7slFt14BZ3X+2HAa/f5yjwUWCY5dOneJjS2hLdJB5Ew=
Subject key identifier:   D9:3C:8D:C3:85:1A:9F:F4:99:05:9C:6E:7A:64:AC:16:1A:D5:C2:25
Certificate issuer:       /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
Certificate serial:       010D0C9F43285847537B5ED0A30BBC10D21670C0
Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     53665
IP address blocks:        216.120.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5e:d0:a3:0b:bc:10:d2:16:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=48100355-0e0d-44b8-bfe6-c1315718b004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:0f:e4:38:5c:c6:e8:7b:dd:0c:33:a5:3d:
                    39:8a:1c:a5:08:7f:01:70:f7:8c:e0:6b:bc:db:de:
                    ed:3c:f1:81:ed:29:a3:35:d0:b8:dc:b7:d1:f1:a3:
                    fb:a0:ef:f9:4c:ed:ef:86:4d:2e:40:78:05:da:cf:
                    cc:cb:bb:4e:7d:63:89:d4:38:8b:2b:26:c0:08:66:
                    17:16:7f:0c:d1:6b:16:6a:d7:99:60:55:7b:0d:45:
                    c8:4a:f0:92:a6:64:f6:85:1b:5f:b3:7e:71:72:f6:
                    b5:64:28:8c:b9:82:35:86:29:8f:47:77:fa:ec:4c:
                    52:a8:97:99:2d:1b:c1:ec:75:96:09:dd:0a:df:27:
                    5a:51:7a:52:da:da:7a:14:57:f4:9b:92:e6:7c:c6:
                    39:9f:aa:c4:d8:7a:0d:40:5a:83:ad:7e:4f:09:f2:
                    52:23:2e:85:01:d7:40:98:7a:98:f4:1f:17:7b:1f:
                    11:38:26:3f:d3:00:4b:4b:11:9c:fc:ba:b8:7d:6c:
                    38:05:cf:0b:70:55:8c:23:f7:41:c1:d3:fe:7a:aa:
                    01:3c:16:03:86:0a:1f:85:29:2f:8e:85:64:1b:76:
                    8f:52:02:60:6e:94:b8:40:1b:66:c0:ac:7e:a7:00:
                    2c:1f:9d:fc:48:9f:cf:e0:28:88:5f:1d:33:72:28:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:8D:C3:85:1A:9F:F4:99:05:9C:6E:7A:64:AC:16:1A:D5:C2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl

            X509v3 Authority Key Identifier:
                keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:9a:a0:7c:24:f2:91:ca:c8:f3:12:b7:e8:64:41:3c:30:
         58:04:a0:ec:4b:70:d1:45:c6:c9:ca:04:72:07:a8:bb:a9:f1:
         fd:e7:ca:81:77:d2:61:04:7a:9a:88:d4:ec:c4:12:20:1d:df:
         7e:f6:f6:97:ab:3b:cb:a7:da:17:f3:be:ce:c4:58:18:9c:e1:
         4b:10:f8:1f:c2:62:37:02:3d:ad:ba:67:88:ea:cc:64:7b:83:
         09:e7:f4:0b:1f:1f:b1:ef:30:30:8e:66:ad:68:f6:63:df:f1:
         da:87:b8:c4:a7:aa:03:f4:3c:6d:6d:ee:b9:23:60:ff:cd:e7:
         02:b7:dc:70:47:ec:e7:9a:54:75:2d:1c:13:c3:ea:c6:84:0f:
         cc:f0:45:22:93:34:3b:4b:9f:88:46:7c:da:31:08:c8:53:b4:
         1a:be:d9:61:45:d0:9b:11:17:a5:8a:ec:14:57:19:71:1c:3f:
         eb:a1:6a:22:99:87:90:5f:58:8e:c7:90:d6:32:36:ad:45:62:
         4b:9d:13:f7:0d:bc:b2:1d:fa:3e:73:0d:02:28:5d:21:fb:01:
         26:42:79:49:71:d3:df:6d:d3:11:fe:dc:88:f1:0b:36:92:98:
         bd:36:fb:1a:e8:d6:c4:2a:bf:c0:71:87:a0:8b:2a:51:ee:55:
         85:4a:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org