Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/816df2da-1c2e-3cc5-bfe6-13844550fecd.roa
File:                     816df2da-1c2e-3cc5-bfe6-13844550fecd.roa (raw, json)
Hash identifier:          AwB3TvURmtA3kzWkWEjST8DMhEN0EGeWmKwC3FHFz54=
Subject key identifier:   FE:EB:FE:FA:01:C6:DC:90:8C:6E:E9:74:38:E6:01:FC:D7:0C:73:DE
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F432858478F8129FC14AAFF1524ED9140
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/816df2da-1c2e-3cc5-bfe6-13844550fecd.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     23470
IP address blocks:        204.152.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:29:fc:14:aa:ff:15:24:ed:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=f2d9816c-433b-422d-8432-a13950e4cf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:27:91:ac:c7:93:28:34:a3:24:99:03:78:
                    b9:17:89:ad:63:80:b9:76:91:60:88:b0:10:7e:bf:
                    85:18:4c:e5:3f:78:54:61:02:1e:c2:1f:65:42:9a:
                    f6:c8:f7:2c:6a:8e:9b:8e:8a:08:da:61:84:05:55:
                    17:64:b9:25:0c:85:08:f9:c5:60:c4:64:be:15:e8:
                    1e:88:a9:cb:4e:33:0a:6a:88:37:6b:f2:d1:56:7d:
                    54:5e:fc:a8:9d:96:5e:04:4e:1e:87:29:a5:c7:24:
                    89:9b:6e:a6:06:4c:bf:4f:1f:45:4d:c3:1d:38:f1:
                    a7:71:65:6d:dd:72:2b:bb:bb:19:0c:41:19:21:35:
                    9c:4b:bd:86:5b:8e:26:0e:fc:9c:dd:22:01:26:f8:
                    b4:3f:73:9c:41:4f:61:8b:ff:c3:41:c6:e1:70:c0:
                    cf:65:6e:a8:96:7e:9f:d6:e9:7b:d3:cc:a8:4f:27:
                    0a:b2:4f:95:c4:7b:e1:c2:c6:1d:70:94:9f:47:3c:
                    65:1e:61:d9:3c:6d:ba:0d:01:7f:3e:8e:fb:b1:6e:
                    10:19:84:5d:2d:ad:32:d3:23:4a:c1:1c:9a:f5:8f:
                    7d:66:a1:a7:91:e5:a7:16:ab:65:36:39:1d:bb:81:
                    91:5e:3a:3b:a0:95:bb:f3:4d:d7:99:fa:9c:64:de:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:FE:FA:01:C6:DC:90:8C:6E:E9:74:38:E6:01:FC:D7:0C:73:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/816df2da-1c2e-3cc5-bfe6-13844550fecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:da:fc:9d:ea:bb:75:98:d4:72:6a:97:23:37:7d:5c:8d:
         c7:f1:dc:10:b3:83:b6:e5:6a:92:0a:51:55:e6:07:57:98:e1:
         a4:6e:88:23:46:cc:43:34:16:d2:50:fa:49:c5:2a:78:dd:66:
         0d:02:d8:ff:1b:7c:1a:a1:5c:ed:ef:62:ab:c5:d8:50:2a:75:
         dc:07:29:eb:01:79:03:8d:91:2e:96:ad:40:d6:3d:fe:9b:e5:
         eb:f1:ca:7a:8c:22:d0:5c:8d:02:58:29:68:76:d9:19:d9:f2:
         4a:f9:0e:77:21:f7:a6:06:7d:86:fd:b3:ae:4e:45:af:4f:c3:
         c7:8e:67:24:a7:1b:cc:5e:81:d4:ff:5b:f5:03:7d:4b:2e:3a:
         69:ff:03:14:7c:c3:84:00:9a:ee:89:27:41:36:63:f1:30:5c:
         f8:79:6f:b8:b8:91:cb:96:38:30:e4:b8:7f:e2:82:b1:dd:8e:
         f5:da:22:e6:57:0a:d1:3b:3b:9e:95:a2:af:70:a0:44:7b:99:
         2d:32:69:6f:31:24:e4:c0:fa:98:bf:31:78:c8:24:ff:c7:8b:
         4c:20:f1:ed:93:d2:c6:8c:7f:95:54:54:df:db:f8:ee:ea:a6:
         4e:da:1b:4b:57:22:0d:97:c5:fc:c4:1a:4d:d8:48:fb:0d:ee:
         6e:60:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:30 2024 by rpki-client on console-ams.rpki-client.org