Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
File:                     85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json)
Hash identifier:          pFGgQ4HvTZpHzKD6bgZl+ZFz3pr2Hlp/XiOiQwJgS44=
Subject key identifier:   E3:36:8C:35:8E:4F:8B:1A:D9:8E:D1:42:1C:25:98:CD:5F:44:B1:52
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858476B3643018BCED439EBC224C0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     64243
IP address blocks:        205.213.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:43:01:8b:ce:d4:39:eb:c2:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=5c7d631d-7b73-45e7-b8c6-907040442704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:a1:26:de:4a:41:d7:a2:ef:df:72:fd:47:
                    9f:48:43:da:08:7f:ac:4a:cd:fa:3b:c9:7c:68:7e:
                    61:9e:f0:6a:ae:0b:da:cf:51:f2:f6:39:3a:e1:b7:
                    6b:db:f4:5e:f8:ba:92:e1:ef:91:e2:5b:24:92:08:
                    c1:6a:94:1c:61:fa:08:07:72:80:48:ae:f8:8c:02:
                    db:fd:79:e4:5b:fd:5f:81:ad:49:46:18:a8:8b:5f:
                    db:d9:34:31:36:70:9b:2f:92:fc:9c:18:ea:40:ec:
                    5e:82:72:7e:7a:ea:b0:b9:f1:4f:bb:6a:8e:f4:bc:
                    cd:cb:d1:43:9a:34:a6:5f:de:c8:d8:e6:74:41:b7:
                    76:de:86:fe:90:4d:9e:89:f6:df:17:d4:83:34:b2:
                    a0:91:13:2b:4e:81:19:1e:11:22:2c:f9:55:9a:14:
                    16:51:56:92:6b:b7:68:8f:a8:51:44:03:d3:f4:76:
                    5c:84:dc:56:a8:09:e3:13:70:b5:6b:7d:c8:f5:c8:
                    0f:11:46:67:fb:ff:e3:54:42:5f:d7:7d:2c:05:7a:
                    40:ef:90:d1:c1:14:4f:eb:cd:65:11:fc:9c:de:49:
                    52:a3:33:a9:9e:c1:12:9f:92:c2:48:eb:2c:59:61:
                    62:58:e5:ae:f5:47:80:96:16:28:79:10:76:b9:50:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:36:8C:35:8E:4F:8B:1A:D9:8E:D1:42:1C:25:98:CD:5F:44:B1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:f7:3d:85:64:b4:62:87:29:68:20:cc:f6:4d:82:c3:bd:
         37:cd:6e:73:f1:e0:cb:ac:34:2a:4c:d3:b9:52:40:7d:9e:a4:
         49:69:29:32:30:e9:ef:5a:ba:ab:64:83:01:34:63:32:d6:c7:
         45:d2:1e:68:a1:42:8b:40:3d:68:da:b4:8e:49:ce:54:97:bc:
         d8:a5:46:21:ca:b6:bf:88:08:78:b2:1a:46:f3:32:45:0b:1d:
         b9:74:d7:ae:88:94:0f:a1:d3:5c:ae:51:c9:d3:0d:95:12:52:
         17:9c:30:1b:dd:26:66:34:8c:90:4c:a9:be:44:1c:70:64:c3:
         db:f8:31:96:cf:88:af:30:48:76:df:93:30:f7:e3:23:9b:16:
         03:7e:0f:a7:be:a0:3e:52:fc:47:08:67:92:d4:1c:ed:0d:b6:
         6e:e8:b2:a7:df:fe:48:23:c6:97:e2:cf:1b:16:07:8a:4c:0c:
         12:e2:37:fa:75:16:e4:77:6a:1c:19:0e:c8:8c:5e:a0:18:06:
         41:fc:83:31:00:82:85:87:e4:83:19:84:87:07:e8:54:f9:cf:
         0f:49:a2:02:e8:5e:20:e9:2d:7c:0c:96:6e:83:6a:e5:1e:5c:
         c7:46:7b:5e:ca:94:42:51:af:23:94:55:a6:61:f3:a7:8e:1d:
         d8:98:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:10 2024 by rpki-client on console-ams.rpki-client.org