Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa
File:                     181826ac-dd0b-3b31-9e77-9527b0a7987a.roa (raw, json)
Hash identifier:          Asvyyo0Ma4Rp+xgbyzmaFSAjbR3V0GLGC4RHq5MeOgg=
Subject key identifier:   E4:8D:41:B4:D9:75:F3:56:E5:5F:28:66:DE:71:F8:7B:3A:AB:2D:80
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584785BBAD9F450B57AF51775D10
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     2381
IP address blocks:        205.213.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ad:9f:45:0b:57:af:51:77:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=fa395e1b-e819-496c-b3e8-96093ecdac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:3f:3a:f7:cb:e3:ae:2e:1e:d1:41:fc:48:
                    35:20:b1:72:c5:0d:d5:bd:06:8b:b5:b7:27:7c:68:
                    87:cd:ca:bf:93:61:e0:0f:5e:55:61:74:fb:a4:42:
                    33:ef:86:9f:6c:7d:c0:e0:ff:42:8b:e2:9f:47:6b:
                    e0:cb:85:32:74:da:df:d7:9d:6c:ab:6b:09:e5:05:
                    13:2a:55:71:c7:3c:2d:d2:6f:e3:d2:89:a8:ee:94:
                    e4:36:30:f3:fe:15:99:f9:dd:b4:f6:dc:99:0e:48:
                    9f:45:8d:9a:e3:3c:8d:72:f8:0d:c4:b5:64:49:46:
                    c5:1b:19:b1:f7:fc:7c:08:96:04:80:f3:e7:1a:43:
                    73:4d:26:9f:08:4c:10:04:78:23:74:77:ea:dc:10:
                    92:44:6f:68:29:27:02:f6:9a:13:ce:9e:bb:fa:b3:
                    2a:32:52:2d:72:8c:e0:ac:22:7d:5a:56:69:8a:9a:
                    81:40:e1:9b:37:96:4d:83:68:f7:e8:93:21:b8:93:
                    2d:dd:e5:25:36:59:aa:49:bc:bf:96:00:e0:77:7d:
                    1e:52:17:20:68:10:dc:a5:2c:b1:02:1a:91:ff:99:
                    d7:62:e6:c7:d6:0f:b3:22:a4:35:82:3c:ac:49:70:
                    da:6e:6c:35:5a:70:8d:a2:cc:9f:79:42:b5:a9:63:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:41:B4:D9:75:F3:56:E5:5F:28:66:DE:71:F8:7B:3A:AB:2D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:cd:b7:82:6b:76:ab:45:0f:65:fc:9d:4a:88:62:75:a6:
         10:37:20:1a:f8:02:5a:82:bf:4b:48:32:0a:34:5b:c9:d3:88:
         93:a2:76:c0:86:ea:fc:71:8a:5a:5d:28:a3:de:98:ea:8b:a5:
         1f:60:8c:4d:b0:06:73:f6:3e:b1:0c:c8:8e:98:94:38:fa:81:
         67:c8:ef:c1:6b:53:1f:62:71:d5:12:f7:b9:45:85:be:fa:94:
         dc:e4:66:85:d5:c6:99:4f:ea:de:6f:15:e2:ae:00:df:8b:f9:
         6a:ba:f3:22:7a:31:be:c3:f1:b2:a3:36:a1:9a:6d:9c:c6:a7:
         f7:97:c2:17:c0:58:89:ab:4d:0a:4d:6e:db:fa:20:ee:be:8d:
         86:53:ca:06:a8:f3:b4:6c:f5:b9:de:26:db:17:c7:89:37:e8:
         3a:1c:0c:54:10:bc:6e:96:32:d2:bc:d2:5d:e5:39:d0:f4:90:
         89:33:86:62:1a:3d:73:62:1c:a6:fa:50:27:d5:1f:4d:59:a6:
         c6:f7:52:59:06:ad:ed:1c:5f:f2:26:1f:0f:66:21:6d:de:20:
         8a:97:a4:c8:5a:c2:0f:9b:53:a7:2a:23:e6:cd:ce:80:0c:66:
         15:f6:aa:99:4d:2f:17:ba:9e:88:59:51:1e:27:9d:00:a3:55:
         cb:0d:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org