Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa
File:                     82b4835c-7baf-3cec-87ed-806a96f53271.roa (raw, json)
Hash identifier:          yHw0r42snNHAw+F07ks653rFlFuXQXEfb1OPy0Z3wvs=
Subject key identifier:   B0:DD:50:E6:37:E8:6F:C9:5B:98:81:49:99:E3:2C:2E:B7:C9:E2:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847EA5A1100914347749D7E8900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     27176
IP address blocks:        69.171.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:11:00:91:43:47:74:9d:7e:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=322b7899-3743-4541-9328-69fd9d0aa7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:7b:55:ff:e3:82:da:d4:c0:f0:59:a1:a1:
                    d3:7f:2b:81:44:b3:87:a1:f9:90:38:54:95:5b:9a:
                    fa:fd:e8:a4:9e:9e:e4:c7:cb:01:d5:52:96:57:c4:
                    f0:b2:44:46:58:b1:60:b0:a5:3a:b7:97:ab:06:05:
                    3e:8c:7f:17:38:ba:44:e4:56:02:b8:df:45:5a:5e:
                    f0:71:ed:36:40:2b:50:dd:61:42:ea:b5:5b:2e:a4:
                    68:f2:87:d2:2b:3c:19:e1:c0:f3:26:dc:7a:ec:b4:
                    6b:f6:d8:39:22:ba:cd:6e:62:2d:da:63:fe:fb:9c:
                    3e:fe:de:fe:05:04:f1:8e:7d:e6:82:7f:62:8f:2c:
                    d0:e1:33:c5:c7:33:c2:33:13:64:b8:6c:7c:0c:47:
                    6e:cc:69:23:3a:f0:5a:f5:92:ad:51:f8:16:88:7d:
                    b1:9d:2a:d0:b0:e4:a2:62:55:d5:c2:13:e3:dc:35:
                    96:21:44:cc:a5:5b:33:ea:44:e7:b4:e9:9b:c5:2b:
                    ac:93:27:32:9f:ad:9d:3b:96:0d:1d:ff:ce:82:1e:
                    15:13:ee:50:77:ae:b4:77:6b:43:24:ef:46:99:75:
                    68:4c:5c:0c:0d:e4:85:12:97:5b:c3:67:d3:b2:6a:
                    02:14:7b:88:b9:c2:5d:1c:2c:2e:f6:da:63:cd:61:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:50:E6:37:E8:6F:C9:5B:98:81:49:99:E3:2C:2E:B7:C9:E2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1b:25:3c:33:a6:0e:87:49:94:64:b2:16:26:3e:44:06:0a:
         ed:a8:ae:48:e5:20:67:a7:ac:ab:51:08:17:60:29:5d:c6:71:
         38:73:bb:d8:2e:61:7a:64:f9:1a:3f:e4:09:d5:9e:2a:03:b4:
         0a:05:18:22:2d:05:26:ae:c9:be:f3:00:7f:61:e7:93:b8:67:
         a8:85:1a:39:06:3e:76:de:9d:f0:6a:61:c3:07:5a:f3:a5:aa:
         d6:8c:9b:cc:a0:d6:49:e0:aa:d1:54:69:1b:c2:a6:a5:54:b2:
         d0:33:f9:de:d0:2d:44:80:86:cb:6d:88:a2:11:cd:17:53:cb:
         4c:69:b9:f7:17:33:2b:98:ce:60:b4:dc:46:12:c1:3a:69:20:
         e7:28:a5:14:58:76:94:6e:4d:43:51:52:10:33:e0:5c:2e:3a:
         c4:8e:b9:9a:51:06:d5:45:a3:a6:0e:11:23:a3:1e:70:87:cd:
         b3:de:5b:9e:56:ba:8b:fb:3e:0f:8e:ef:3e:59:d7:1d:71:3e:
         cb:98:58:53:a0:38:f5:c2:c8:84:3c:23:fe:da:00:92:87:e7:
         fe:bb:d5:f9:fe:f6:5b:ca:24:3a:bc:66:5f:af:7c:ed:a2:a8:
         90:98:be:bd:47:ea:f8:6d:38:af:ac:7b:50:ec:47:db:80:52:
         40:09:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:27 2024 by rpki-client on console-fra.rpki-client.org