Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/bf9d1906-19dd-381c-9e32-8415e23088c7.roa
File:                     bf9d1906-19dd-381c-9e32-8415e23088c7.roa (raw, json)
Hash identifier:          5vb8pRU8F9UH3zJXEQIQhlmqVTVFllcprz2tCTb92SA=
Subject key identifier:   C4:44:E0:A8:F1:65:9D:C7:B5:FD:28:ED:18:F9:82:F3:F2:85:5A:E8
Certificate issuer:       /CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
Certificate serial:       010D0C9F43285847CA3F7BC2174C696D172E2AE0
Authority key identifier: 19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/bf9d1906-19dd-381c-9e32-8415e23088c7.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397797
IP address blocks:        205.137.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7b:c2:17:4c:69:6d:17:2e:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=0965057f-12af-486b-810c-9cb0fed7a748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:a2:28:16:96:f8:41:93:ec:3f:14:29:33:
                    94:8b:9b:3b:33:a6:46:a0:03:0c:fa:40:fb:1c:91:
                    49:bf:b8:df:68:61:37:62:3e:80:7f:87:ea:7a:90:
                    6b:79:ed:63:c8:cf:ab:7d:cc:8b:f2:9e:79:e0:46:
                    a5:01:f7:76:88:12:1a:94:b9:77:57:da:b1:c8:86:
                    26:12:cf:80:a5:a2:5a:00:a1:be:db:84:30:d7:87:
                    b8:12:e1:be:3c:9c:e4:97:d6:a9:ad:81:ed:cb:6b:
                    80:92:c1:e8:33:b0:f4:26:3c:af:1e:93:eb:7f:df:
                    12:c0:5e:32:99:8b:0b:16:3c:74:9b:3c:3c:19:db:
                    d2:72:40:64:55:c2:0d:96:e7:c7:8c:af:b4:10:c4:
                    9b:f4:84:96:51:21:9c:be:1e:d3:dd:a9:c8:45:cd:
                    ee:02:4d:54:24:03:95:8e:02:ed:9f:b1:54:2a:92:
                    b9:ec:f9:78:9a:48:18:1d:38:49:66:61:28:f5:71:
                    0f:5a:e4:c1:36:f0:a7:1c:3f:65:7b:b9:bf:3f:26:
                    2f:91:57:37:cc:a0:aa:93:3c:e7:ca:a8:fc:d9:5f:
                    fc:73:2d:81:5b:2f:c3:4e:26:4c:fd:32:84:04:e7:
                    35:3d:25:a4:d0:0d:11:65:cd:e9:c5:55:94:69:a6:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:E0:A8:F1:65:9D:C7:B5:FD:28:ED:18:F9:82:F3:F2:85:5A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/bf9d1906-19dd-381c-9e32-8415e23088c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl

            X509v3 Authority Key Identifier:
                keyid:19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:6f:32:c6:5a:c5:c5:ed:75:d3:99:93:66:ed:7e:71:48:
         6a:44:76:f5:0e:e0:36:55:35:e2:00:44:0b:0d:ec:7a:05:5a:
         72:75:71:fd:45:78:27:49:04:8d:4f:9c:0d:e6:7a:73:86:fa:
         d3:f7:96:7b:85:5d:9e:f1:d8:d4:94:33:1e:96:dc:76:7e:7a:
         80:36:12:52:ee:04:b0:6a:a6:01:01:ba:11:6e:a5:e7:cf:da:
         32:ae:32:1a:a8:d3:cd:f0:ca:10:e8:00:01:03:39:05:18:f6:
         18:e4:b0:1b:4b:61:ae:59:32:d3:aa:de:84:e5:ca:91:4a:ad:
         4f:2c:c3:11:8b:a2:79:a4:6f:a9:89:e8:f3:2a:87:3d:ed:84:
         c1:52:40:91:c7:c0:9e:b4:71:73:37:5a:00:51:ce:12:04:c0:
         c3:1e:95:61:67:20:88:f2:8d:77:cd:8d:ce:96:74:c8:8c:5d:
         4d:23:7e:52:25:5e:79:af:65:67:4f:9e:62:b6:f6:e4:1a:2f:
         a1:70:be:04:c8:ba:83:f3:1f:88:f8:61:c5:b3:bd:75:94:1c:
         c0:9b:e8:5b:bb:43:6a:bc:e0:fa:b2:1f:74:e0:26:c0:97:4a:
         33:0b:90:2a:0b:07:b6:8d:49:92:28:ab:5b:13:05:f3:5e:af:
         ae:43:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:15 2024 by rpki-client on console-ams.rpki-client.org