Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
File:                     47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa (raw, json)
Hash identifier:          xXxnFyWopkg90v3wQcO4/sjhAPKY0Tu/3gV7B6ifzSs=
Subject key identifier:   B6:A2:27:4C:F7:F0:D5:A9:B8:80:DE:0E:DF:A9:8B:B3:A6:C8:87:13
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847A47132D444D6A84DA9AC1680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     203
IP address blocks:        170.30.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:32:d4:44:d6:a8:4d:a9:ac:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=459a24ce-5c2c-4cbb-9c85-aa412f4ff925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:b8:15:0c:27:cd:40:47:92:f0:ed:47:f6:
                    51:56:8f:e8:c3:db:41:9e:c1:f1:e1:c3:76:c4:c8:
                    3d:8f:90:83:7a:28:70:6a:51:31:b9:b6:6a:79:eb:
                    b8:3d:59:94:b3:e8:07:fa:b1:23:5b:2c:ed:a0:87:
                    c6:85:cc:27:fe:e3:a4:b5:3a:0e:0f:37:74:cd:b8:
                    32:b1:a0:a7:70:8d:cb:e4:15:11:ca:06:03:89:fc:
                    f7:40:a2:95:3b:9b:67:3c:8b:46:0b:42:2a:b5:9c:
                    f2:5c:68:4e:6f:4b:37:19:e0:ee:3a:f0:95:a1:cf:
                    5d:0e:e3:5c:ff:e1:ea:82:55:92:8a:c0:da:2e:00:
                    fc:17:cf:28:f5:4e:47:9e:56:48:92:6c:38:39:ff:
                    d3:02:08:95:87:3f:a4:7b:7d:dd:16:f2:f3:09:54:
                    cb:e1:ad:0c:31:17:ab:35:1d:df:d6:93:96:eb:c8:
                    07:31:41:e9:6c:0a:43:53:71:13:a5:b8:66:b4:55:
                    3f:b5:c7:0f:44:4d:ee:d9:62:f8:5e:2a:4e:09:e4:
                    0e:c6:2d:d8:de:21:fe:0f:50:4c:e6:c0:f4:62:18:
                    e0:95:4e:e0:8f:4e:23:b8:1b:0a:e5:2c:9c:53:3e:
                    5d:61:92:cf:e2:e8:41:9d:f6:4a:80:35:17:ae:47:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A2:27:4C:F7:F0:D5:A9:B8:80:DE:0E:DF:A9:8B:B3:A6:C8:87:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:f9:f8:2e:14:5e:26:73:11:8e:a8:98:ff:42:e2:f2:93:
         3a:c6:5e:3f:e6:c3:b7:7f:7c:92:1e:fe:2f:67:99:70:68:eb:
         9b:6a:40:a2:96:05:7d:47:02:24:3a:c3:04:cd:72:e3:ac:e3:
         f6:da:bd:c6:ba:16:41:f4:41:73:5a:37:5d:88:73:ce:80:84:
         e5:9e:f7:6c:11:4b:c0:f0:f4:f3:da:9b:68:1e:7e:fd:77:ac:
         08:30:b6:86:40:12:3c:f9:13:a2:0c:b8:0e:f6:54:ab:9d:08:
         cb:fa:de:2f:44:eb:14:42:6d:fc:25:b2:ca:74:47:7b:53:70:
         80:bf:d1:65:c2:20:b6:cc:56:50:b0:3f:d5:ec:90:f2:80:9a:
         41:5e:ba:d1:02:95:85:bc:b5:0c:c6:bb:4a:ae:4b:9a:2f:cb:
         50:4f:8e:34:4f:69:91:ba:fb:10:89:85:b9:5a:c6:e8:34:db:
         bb:52:eb:51:47:41:29:34:85:75:64:39:9b:e1:16:e9:b4:78:
         a8:03:40:cd:84:0a:0a:05:41:35:43:0f:ee:8a:47:3e:8d:ac:
         2d:1b:5b:f4:71:97:3e:c5:70:b4:21:01:1c:38:c5:ed:9b:c9:
         28:0d:5d:5e:5d:f2:c8:12:9b:dd:a8:0a:b2:c7:d7:98:a1:0f:
         ce:37:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:43 2024 by rpki-client on console-ams.rpki-client.org