Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9e29b0-7f41-3702-a666-7b01a8fc1d67.roa
File:                     3e9e29b0-7f41-3702-a666-7b01a8fc1d67.roa (raw, json)
Hash identifier:          qqQ0y+y6tGC4h+k2arqXOAAbdnnLcNP6QQnFPj9QDrQ=
Subject key identifier:   34:D4:81:58:CF:DE:44:B1:07:60:88:E8:95:79:82:AC:E4:6D:4F:94
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858474585F802651AF39158457300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9e29b0-7f41-3702-a666-7b01a8fc1d67.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     212238
IP address blocks:        67.203.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:f8:02:65:1a:f3:91:58:45:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=bfe74a43-28dd-494f-879d-e466e1be9658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:9b:b1:f7:0e:37:e9:50:f0:76:62:14:ae:
                    60:6b:ca:59:f3:63:42:91:dd:80:a5:ab:05:16:58:
                    fe:23:26:5c:b7:bc:00:2f:a0:1a:05:7e:4e:d9:06:
                    fd:67:3c:55:ae:78:f0:73:d2:4d:48:70:ca:d9:f4:
                    ad:38:72:8b:44:68:34:44:c1:ed:8c:4c:7c:58:f4:
                    7e:cf:0f:26:f3:b4:e7:8d:9a:b1:7e:00:ca:67:7f:
                    61:5e:80:85:43:6e:85:e9:88:74:57:4e:27:1f:a1:
                    30:ca:bc:6b:37:0e:ad:09:a5:3a:07:d2:e6:e7:6b:
                    b3:94:2a:8b:67:ca:42:59:22:83:92:b9:d7:55:af:
                    60:5d:21:50:07:a5:de:d6:f9:c9:10:0f:f5:20:01:
                    de:a3:04:d0:f4:46:d2:2f:93:c1:5b:8c:be:a1:24:
                    be:30:c4:98:37:e0:63:e9:89:0c:b0:1d:97:29:6f:
                    f2:3b:32:5d:87:bb:68:70:98:40:2b:6e:56:9b:ef:
                    8f:53:6f:3e:9e:40:3b:0d:96:51:6d:02:3e:3b:a4:
                    cd:df:57:d8:ec:04:2c:61:72:d5:77:5d:59:59:49:
                    36:27:d8:d6:c7:a6:65:e5:e7:6b:b2:6d:a1:07:ed:
                    25:54:06:ac:6c:d7:53:ff:a0:d6:d1:fb:2d:41:51:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:81:58:CF:DE:44:B1:07:60:88:E8:95:79:82:AC:E4:6D:4F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9e29b0-7f41-3702-a666-7b01a8fc1d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:48:17:76:1a:d1:66:4f:4e:10:23:71:d9:9e:93:c5:c6:
         0c:2b:ee:47:46:5f:84:20:c4:e9:f0:b4:d4:1d:eb:f5:39:5d:
         0d:f1:58:29:a4:11:31:3f:e7:46:ee:c4:5b:f2:0b:ad:e7:c6:
         14:6b:67:49:46:23:5f:c5:ae:66:78:11:14:77:2c:fc:73:48:
         86:29:ce:46:b4:34:58:94:c2:17:8c:68:22:f2:10:2a:4a:4c:
         97:70:31:02:e1:19:5d:95:42:fb:dc:b3:33:68:3c:0f:fc:f0:
         5c:5b:0e:d9:22:9b:1a:07:ad:d6:bf:a8:37:a4:9d:03:5b:c3:
         81:f4:99:9c:f0:aa:1c:7f:4f:2d:b7:2a:6a:b9:9c:1c:c1:e4:
         b5:82:a8:75:3e:3c:34:62:c1:0a:2b:18:43:49:48:84:cc:4c:
         ca:16:23:f8:1e:8c:d6:7c:35:3f:3a:74:54:6b:6a:e4:76:ad:
         69:3b:eb:8f:c0:08:84:71:93:bf:f5:0b:f9:e8:19:cb:c9:93:
         68:bf:cb:82:46:f8:64:65:a3:2e:f9:5f:19:73:24:51:a0:61:
         75:1a:4c:ea:53:01:23:83:52:c9:c0:67:90:46:cb:13:b5:bc:
         93:17:c3:3b:32:5a:03:b9:04:88:56:af:3f:24:63:b0:3c:db:
         bc:6d:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:12 2024 by rpki-client on console-ams.rpki-client.org