Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
File:                     6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa (raw, json)
Hash identifier:          6uDy0bfJ4K6cz22r/riyjeWQqqWfTBXAKvcE+Z7LuGU=
Subject key identifier:   94:63:91:F2:CC:5E:0C:73:6D:5B:0F:33:3C:3A:32:0D:8F:42:F6:4C
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584774FB9305A6F441508C506F00
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     10747
IP address blocks:        208.56.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:93:05:a6:f4:41:50:8c:50:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=c68264d9-ecae-4126-b16e-ffad44d0d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:96:16:99:96:25:60:49:58:0d:ef:f6:3d:
                    88:95:d3:df:cd:dd:46:a1:81:10:3f:2e:5b:63:42:
                    8a:2f:3c:a9:28:04:5e:dc:aa:6d:fd:c5:22:56:61:
                    0e:3b:1d:99:dd:de:b5:b3:d0:f3:60:6d:d5:3e:8f:
                    d9:9d:c7:cf:a0:b4:66:77:07:f3:00:84:bb:35:1d:
                    f3:e9:23:22:14:0b:57:4d:46:e9:e5:9f:55:d5:20:
                    00:43:ba:6d:01:08:17:37:de:80:99:ef:d8:9a:7b:
                    ef:4b:c2:15:1a:b2:d5:d3:0b:81:a1:11:2e:68:1f:
                    0a:27:8f:06:79:b0:93:26:a9:00:78:00:ed:5c:5b:
                    89:bf:d2:fe:24:c7:d1:c5:77:17:af:ee:02:18:60:
                    50:2d:3d:96:15:39:d0:59:c4:9d:20:8c:41:1c:e7:
                    37:10:08:fe:c1:1f:1f:2a:55:aa:9c:45:cb:53:5b:
                    80:c1:aa:ee:0b:3e:b5:ae:dc:00:b0:fb:f7:d3:6a:
                    c2:70:48:27:db:f9:00:e9:5a:6a:5e:b6:9d:76:e6:
                    4c:47:29:f6:bf:9f:08:e8:f2:05:24:88:22:53:ab:
                    71:2f:be:8f:a1:0a:9b:a9:e1:30:f2:25:87:66:6a:
                    82:14:52:29:27:98:94:30:ff:61:b4:82:28:72:72:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:91:F2:CC:5E:0C:73:6D:5B:0F:33:3C:3A:32:0D:8F:42:F6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:2f:33:a8:a7:86:af:f9:7d:61:a2:87:d6:6e:ff:fb:23:
         53:4a:3e:ff:1e:13:69:ff:17:9a:a4:33:3f:59:69:16:e8:d2:
         88:90:b0:3d:ae:52:86:7f:8a:04:03:13:23:57:83:c1:16:7f:
         30:be:c6:47:92:b2:f7:28:81:b9:c0:d4:1c:43:5a:46:3c:68:
         81:b7:ec:b8:60:d8:7c:ca:0f:8b:2c:3f:1f:f4:59:1e:1c:44:
         9e:d3:25:5d:20:64:c4:36:92:75:61:f2:24:0f:39:84:38:9d:
         f6:b4:bc:c0:d7:b9:eb:14:a1:79:10:1e:3a:31:9e:a6:fc:bc:
         f9:89:f6:fc:21:97:f1:7d:df:31:49:12:fe:50:4f:ad:cc:1b:
         13:3c:42:81:a7:49:82:f0:2d:b1:3f:ff:2d:61:53:2a:a7:03:
         65:32:35:3c:be:40:51:97:f6:04:74:6a:b8:4b:84:3c:06:83:
         b1:25:14:4c:66:86:60:7d:13:0c:30:6a:b7:7c:de:6d:10:0b:
         a6:21:8b:e8:d5:55:1d:65:b7:17:f1:d0:17:49:16:5e:e5:67:
         f9:0e:f9:18:ce:a1:6e:8b:4f:ac:4f:28:59:f2:a3:09:e9:6d:
         ae:aa:ea:ba:ca:c2:4a:7d:5f:73:0a:f3:fb:b5:e2:ed:90:f0:
         3d:ac:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org