Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa
File:                     b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa (raw, json)
Hash identifier:          ei7Ja+0CMACfUS1zRaUGn9q2NiALM4VogyXOkJ7KfIs=
Subject key identifier:   F2:13:F2:DB:60:8F:F9:1C:2F:D9:B9:4B:4F:B6:A9:1D:B6:86:CA:A8
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285847B3CC034108F18251D29548C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     35950
IP address blocks:        204.156.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:03:41:08:f1:82:51:d2:95:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=62ba56bf-ecc2-438b-9897-5bde86c2ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:d2:5e:a9:47:85:ac:99:05:c4:49:e7:5a:
                    8e:50:67:67:9b:5a:e6:fc:51:a6:75:6b:22:bf:be:
                    50:69:6e:89:a9:63:a5:8f:bf:1f:e9:02:7c:07:69:
                    6b:f2:37:69:91:8c:bf:38:63:19:6d:c5:8b:13:dd:
                    75:42:0c:ab:56:87:ec:8c:ed:9d:01:96:bf:3d:d0:
                    aa:70:37:40:2d:58:4d:33:d8:ce:8b:aa:12:73:18:
                    c4:c0:e8:2b:35:a0:77:48:c2:0a:e2:42:e4:74:6d:
                    c6:da:00:4b:59:bb:fa:01:bb:cd:49:32:43:48:4a:
                    4b:d5:f5:7b:e3:57:d5:b6:7d:d4:86:bb:a1:b1:dd:
                    1e:f4:c2:f9:5c:25:b8:15:97:d1:5c:fc:c9:5a:41:
                    88:dc:29:ad:e1:f2:4f:bf:c3:e4:e4:82:0a:3b:b2:
                    97:e0:bf:83:a1:30:c4:2e:dc:16:45:2b:3a:88:d6:
                    ac:e2:41:57:ee:62:a1:d6:c1:92:1b:13:16:bd:ea:
                    c3:53:62:39:aa:72:45:ec:a4:f2:9e:f5:bb:00:6f:
                    86:fa:d3:78:fd:7f:77:12:4b:51:89:7e:2c:0b:60:
                    66:7a:2a:1d:5c:09:6e:a2:12:0f:f6:e8:38:ff:e2:
                    5e:b5:dd:bd:53:f1:59:92:f3:9c:82:db:e4:12:d5:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:F2:DB:60:8F:F9:1C:2F:D9:B9:4B:4F:B6:A9:1D:B6:86:CA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:c9:af:2f:de:2f:50:38:dc:f9:0e:ca:b9:4b:8a:4b:1f:
         fa:1c:a4:52:1c:90:8f:28:1c:ef:79:29:ea:52:0f:48:cd:ae:
         b7:a0:7e:e3:31:1a:bf:a1:d7:9e:b0:b1:05:e8:bc:88:e3:64:
         da:e0:9e:b6:37:74:71:8d:1e:23:48:a7:f4:94:d8:eb:70:eb:
         12:78:46:bf:de:57:0d:13:55:e8:a0:5d:c0:70:1a:59:fa:59:
         9c:8b:80:11:fc:7b:19:f4:c3:ed:2f:3d:51:80:7a:66:eb:2f:
         ce:ab:e3:7f:8f:58:6f:6f:2c:15:77:0d:37:92:03:8f:59:72:
         63:8a:e0:c9:18:9c:2e:d8:e6:ee:7e:19:1b:6c:86:10:00:74:
         18:d1:11:26:06:3c:f3:d5:ca:88:ac:e7:67:aa:f3:78:7e:7e:
         39:22:ea:c8:a5:c0:6b:a3:53:98:fd:f6:09:aa:cc:97:0a:29:
         db:9e:2c:e4:00:14:e0:d4:d9:1e:ac:75:24:5c:de:53:b5:f3:
         9c:d8:e3:0f:4c:cb:64:87:e8:b1:a0:4b:53:84:dd:88:86:11:
         e5:ee:7e:92:79:d2:69:bb:c2:2b:3a:32:a6:a0:ca:a8:45:4e:
         f2:24:09:df:da:8e:11:48:0e:18:07:9c:40:6b:e9:f1:81:68:
         bc:f0:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org