Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          oCfZNGhR1AYs9d9THjqPBFmSn0acELBeGS/abUzi+0c=
Subject key identifier:   E6:D4:A4:58:D0:84:0C:40:5D:26:6F:5D:7B:3B:A4:4E:1C:0E:75:02
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F432858473360A1A115FF254847D728C0
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a1:a1:15:ff:25:48:47:d7:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=8a37b667-3e11-49f3-8b31-8a327bac4672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:38:44:83:84:db:12:83:14:38:77:ba:47:
                    a6:3b:5c:7d:74:41:5c:54:09:e4:fb:be:44:e3:15:
                    bc:80:18:af:26:d1:30:f4:f1:af:e5:8a:85:3a:b4:
                    a8:0e:81:bf:2e:34:0c:39:c7:9b:ee:e7:52:51:fa:
                    6b:9c:2f:6d:4a:ef:c0:77:95:28:85:4a:ae:32:0c:
                    f8:67:4f:85:81:86:37:df:18:1b:ef:9d:1b:80:80:
                    0e:c6:d2:5a:87:c0:67:c9:ce:ea:cf:7c:df:34:06:
                    de:19:de:cd:ba:f0:64:31:77:12:04:33:f7:eb:04:
                    18:a2:ab:da:dd:76:ee:6f:a4:d5:32:63:91:36:fc:
                    85:20:da:e0:d7:93:d1:38:c2:ae:29:7d:21:4b:59:
                    e9:4f:50:b8:c7:c5:b0:52:d1:df:6a:b8:60:2b:28:
                    94:33:64:06:4e:e3:ca:a7:f7:e3:eb:c5:d9:fc:b0:
                    1b:78:b6:98:5c:3e:29:64:17:87:90:f7:41:6c:db:
                    ec:eb:47:44:51:61:b5:a8:41:74:32:5b:05:83:a1:
                    4d:c5:d9:89:28:7a:a1:09:78:e4:23:8b:bf:c2:0c:
                    72:67:2c:94:0b:eb:bf:2e:27:e3:fe:4b:3e:9b:0b:
                    43:26:f2:b4:7e:03:bf:69:eb:69:1b:1a:fd:c6:b3:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:A4:58:D0:84:0C:40:5D:26:6F:5D:7B:3B:A4:4E:1C:0E:75:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:bc:da:ea:2b:cc:62:d0:2d:54:b2:55:c2:f9:41:65:7f:
         c2:8b:2e:43:0f:88:74:38:3d:d4:76:9f:d4:61:04:6f:d4:6b:
         3d:77:14:ed:b7:17:4d:aa:33:d4:1c:54:1b:86:93:04:63:e8:
         cb:f1:c4:07:d6:da:67:83:93:04:99:c3:c3:0d:45:d9:1d:43:
         87:1e:e1:03:ac:50:db:fe:4b:2a:b2:be:df:ce:d0:99:e8:45:
         30:48:80:f3:12:91:f2:c4:ca:e3:24:6c:37:ec:5b:46:f2:80:
         38:d7:44:ab:26:58:19:21:15:9c:0d:d5:fd:d9:e9:02:f0:ed:
         a6:0c:e5:0e:8b:00:06:44:dc:40:28:08:9f:4c:47:9f:c9:27:
         06:25:e5:fd:c0:54:aa:bf:b1:88:e1:e8:01:01:76:34:4a:9e:
         0d:c0:aa:f1:e6:cd:38:25:f4:37:0e:26:55:b2:e5:ad:31:f9:
         8a:0f:a0:fc:f6:1b:43:a2:f1:79:ba:4a:70:00:f7:d1:0a:18:
         39:96:23:79:da:e7:ed:d9:91:d3:ef:72:10:83:21:0d:16:8a:
         e0:d4:8c:d4:72:4c:2e:5d:2f:2e:d0:29:a9:29:c1:15:cb:51:
         a6:1b:4e:1a:39:c3:ea:d2:ff:76:e4:6e:5d:27:0e:fc:c9:31:
         53:32:15:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:23 2024 by rpki-client on console-ams.rpki-client.org