Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
File:                     9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa (raw, json)
Hash identifier:          L3Y5sdimaLwA4p7D2DMXN4DbGQkWcNfxdDyF79kO39o=
Subject key identifier:   BF:DD:EA:97:D5:AD:85:3C:2A:3F:82:56:D9:AB:20:42:E4:70:0C:77
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584589A31F1FA32CFE57B784F380
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     0
IP address blocks:        206.53.205.0/24 maxlen: 24
                          2606:a980:0:9::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1f:1f:a3:2c:fe:57:b7:84:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=4c21e2aa-8cc1-4cd0-8c46-a82a40014a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:a4:c7:8d:73:b3:0b:90:97:dc:c3:5f:4e:
                    fe:cf:fb:04:66:3f:6c:9f:8e:7f:55:f4:10:e9:1b:
                    ba:fc:92:c6:ab:2f:b9:67:8c:7f:3f:d8:5f:5f:c4:
                    a4:fc:11:2f:9e:14:90:bf:c0:e1:8d:05:e0:20:0c:
                    0e:b7:80:6b:88:97:1c:75:b1:1f:dc:6e:ae:c3:3d:
                    cd:b9:68:ab:56:32:0c:5c:02:22:c4:79:f0:a1:12:
                    16:88:94:1f:2c:58:16:a2:98:33:a3:26:05:7e:f6:
                    83:3c:93:c4:11:22:bf:e3:d7:b3:95:ed:c2:77:34:
                    ba:75:f8:32:e2:55:a4:ea:96:15:4a:4e:4a:ce:50:
                    6d:f9:c0:11:e1:9f:bf:84:ef:53:1a:77:31:2e:7c:
                    81:15:e4:79:0e:78:70:ee:a6:b6:8c:65:c9:8f:f7:
                    71:f0:fb:de:0f:44:7e:e4:95:b7:30:e9:a3:ba:81:
                    95:4e:c3:aa:0f:d9:65:09:86:85:24:05:93:ae:36:
                    94:c7:8f:76:f6:86:dd:3c:ba:93:4e:72:9e:06:7d:
                    05:62:79:e4:7b:12:8f:da:48:b3:15:33:07:ed:3b:
                    3c:9f:75:24:e0:6f:e9:81:c5:78:bf:89:33:7b:15:
                    2f:6e:24:20:63:b5:b3:b2:04:b7:d9:f7:23:6f:b5:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:EA:97:D5:AD:85:3C:2A:3F:82:56:D9:AB:20:42:E4:70:0C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.205.0/24
                IPv6:
                  2606:a980:0:9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:24:12:f6:d3:a6:ed:91:55:54:13:89:3f:79:09:17:01:7d:
         a9:63:3e:a3:b0:e5:b9:b9:2f:30:67:2d:2d:59:e4:13:a2:19:
         93:39:3b:5e:44:48:6c:87:db:02:5b:b6:10:a2:49:5e:be:fa:
         76:09:f4:98:78:cf:ee:1d:50:14:68:85:b8:b3:00:87:46:14:
         d1:10:45:60:72:1b:98:43:a2:54:f6:d1:5c:4f:98:e4:fb:5e:
         a7:f9:a4:4a:9b:21:06:f2:d7:f1:3e:e8:fa:98:6c:ff:23:81:
         44:d8:80:6c:05:11:0d:f4:aa:e8:05:57:2c:17:82:46:31:79:
         0d:40:d8:b7:a9:90:f3:28:8e:b4:f3:3f:23:c4:0d:48:16:3c:
         d2:e7:8c:5f:ed:75:d7:1e:b4:02:ff:d2:bc:c4:89:78:68:c1:
         90:6f:aa:c4:13:41:44:e6:ba:5f:ba:72:cd:46:e1:3c:28:ea:
         16:fe:a6:0d:5a:23:c7:da:cc:90:88:4c:5c:43:c2:2c:ef:34:
         3e:5a:d0:28:1b:3b:4e:83:29:bd:5e:b8:d3:55:77:77:a9:a8:
         67:a0:91:9e:29:a4:cc:46:4d:d4:88:66:ac:bf:fd:b3:bd:b5:
         87:10:50:45:7f:49:92:67:8e:d3:3c:0b:f8:9b:c3:92:88:43:
         bf:a4:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:51:58 2024 by rpki-client on console-fra.rpki-client.org