Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b2717f9d-afd4-3c2b-9504-6253578f80fa.roa
File:                     b2717f9d-afd4-3c2b-9504-6253578f80fa.roa (raw, json)
Hash identifier:          yDXcbc9eDYBbcJGHY23hc/MpkSdMHmsgjNgJnTV2vJc=
Subject key identifier:   90:C7:9C:5F:64:B7:20:51:01:60:23:B3:47:07:34:4A:64:2C:2E:C2
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858476B36426A4B3BDD68C694D320
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b2717f9d-afd4-3c2b-9504-6253578f80fa.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     36723
IP address blocks:        205.213.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:42:6a:4b:3b:dd:68:c6:94:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=ac34f813-2267-4527-8bcf-8025dd6bfc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:84:03:15:60:90:28:13:49:f9:91:f9:2a:
                    ab:da:90:f2:3d:0b:c6:a9:85:01:d1:54:93:36:0f:
                    8c:d6:dd:c5:fc:85:bb:00:2e:18:57:1a:78:d9:71:
                    43:20:60:43:e4:8f:a9:02:1c:f5:fe:f2:52:d6:b7:
                    8c:19:ae:0a:f0:30:53:78:40:22:4f:fa:0b:ae:30:
                    9e:4d:08:99:7a:ec:b6:3a:93:37:7b:e6:85:f8:98:
                    dd:f9:a4:e2:c5:a8:00:8c:10:18:22:a5:68:7f:c3:
                    3a:6e:be:8c:a8:2f:a3:94:9c:92:69:62:35:88:97:
                    11:0c:10:d1:60:6b:4e:8c:0f:3c:7d:92:f9:e7:29:
                    dd:fa:ff:13:91:72:64:39:60:5b:71:e4:72:c5:8d:
                    bd:ee:2b:12:a4:70:09:c8:70:27:3a:5d:00:09:78:
                    95:5e:e4:74:62:4b:f0:e3:93:db:a5:51:b7:ba:6a:
                    b7:6b:78:04:d5:58:ec:e2:2e:e8:b2:a0:41:9f:74:
                    be:f5:e4:64:6f:08:9b:bc:07:9e:fa:48:9c:0b:70:
                    48:69:c7:77:0b:9b:34:c5:d5:61:b8:c0:23:b5:e3:
                    ce:01:7a:f1:a6:84:c8:e4:40:77:df:f8:08:20:06:
                    ac:fc:86:c3:bb:05:8a:1f:61:3d:83:d5:7c:6d:1e:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C7:9C:5F:64:B7:20:51:01:60:23:B3:47:07:34:4A:64:2C:2E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b2717f9d-afd4-3c2b-9504-6253578f80fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f7:9c:34:b1:da:34:95:2d:ff:87:ed:67:fe:09:21:54:00:
         53:4a:22:83:92:83:e0:cd:13:47:11:68:72:89:82:7a:89:b9:
         0c:c8:cb:50:0d:7d:e5:1a:8c:33:67:2a:fa:c0:75:63:40:3e:
         47:40:f9:25:b1:a7:7f:08:0b:6b:d1:dc:42:db:0c:0c:b2:6b:
         e7:26:60:e1:39:90:09:2a:0d:12:fd:22:55:5d:51:34:75:bb:
         1f:2d:35:69:74:26:31:15:2a:bf:74:9f:ad:b9:f8:22:1a:7e:
         e8:da:df:62:26:cd:f6:a0:6c:f7:68:3e:e0:4a:11:12:60:f7:
         40:c2:82:d4:d6:da:81:80:25:2e:0f:2d:36:31:69:ad:cb:a0:
         0f:ad:71:c3:02:d4:08:0a:32:24:da:c7:06:7c:28:44:9b:ed:
         a3:c1:4b:78:be:dc:6a:99:02:80:22:eb:be:c5:02:b3:07:87:
         3c:e8:af:94:cf:e0:55:1f:ad:72:37:98:db:44:3c:b5:21:e3:
         49:81:8e:94:4b:ec:f4:4a:6b:e2:3c:e1:46:ba:f9:24:9f:e4:
         e4:d8:51:78:29:08:45:9c:45:d0:10:0e:8c:9a:38:ca:c7:4b:
         5e:15:83:25:9a:32:42:34:43:ae:b7:68:59:09:91:97:5e:30:
         5d:b0:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org