Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa
File:                     407b4528-0b5f-3711-889f-62a6ac6815da.roa (raw, json)
Hash identifier:          3BwXj4eyEsBKora9TYwl0J+Hn5qGuQCBDqS2+JH8rjA=
Subject key identifier:   E4:64:CE:65:1F:21:DF:F8:58:1C:98:46:2D:CA:FE:70:57:9B:9F:86
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230E78415484AB96D3E2700
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     262287
IP address blocks:        206.127.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e7:84:15:48:4a:b9:6d:3e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=b5b54a51-0d3b-4259-9430-f6b3e2644935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:28:2f:34:72:3f:b1:93:ed:0f:a8:6d:de:
                    97:91:f0:07:22:61:88:44:a7:35:83:e9:7f:41:26:
                    85:4e:36:7f:6d:62:52:97:ae:67:b1:25:b6:af:e2:
                    18:e2:e6:fb:2a:99:ef:63:c6:04:1d:69:cf:d5:6e:
                    0a:aa:ac:51:75:bf:a2:8f:9d:04:37:c9:3f:74:bb:
                    7e:a5:60:93:51:26:ff:aa:1f:64:d9:96:ae:d2:af:
                    90:56:8f:43:68:fc:c0:ca:b9:21:8a:39:f2:6a:cc:
                    37:68:3a:3b:9f:8a:e6:69:a2:76:e3:3e:f4:9e:ba:
                    01:31:98:69:ff:75:0a:80:96:de:9c:24:23:a6:a0:
                    a9:99:13:f4:c3:e1:76:78:81:0d:cd:9c:01:bc:b1:
                    13:ae:f1:20:e8:69:64:19:74:a6:5e:35:db:36:1c:
                    2e:ab:ea:83:e6:e0:48:4d:c8:c0:d3:c4:7d:75:d8:
                    e4:0a:d3:ed:3d:ce:a5:60:d6:75:68:44:ce:9d:51:
                    69:4b:6f:ef:1e:62:93:57:d9:02:c1:7b:86:e7:1a:
                    6e:9d:bc:10:13:19:70:37:c9:59:20:63:5c:58:01:
                    e2:99:25:42:9d:85:a2:94:ba:01:0a:de:08:00:76:
                    57:95:06:40:d0:12:67:5c:73:87:06:cd:31:2c:c5:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:CE:65:1F:21:DF:F8:58:1C:98:46:2D:CA:FE:70:57:9B:9F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:69:46:c8:ac:4c:5b:59:93:7c:b9:da:5d:c3:16:5b:21:
         1a:00:d3:5f:bf:ef:b9:69:10:a6:90:a4:ec:0b:29:80:4e:d7:
         bb:ce:ce:fe:ef:6b:dc:6c:db:81:6b:9c:12:5e:bf:f6:18:0e:
         61:fd:9a:db:b5:a3:b4:9e:95:58:36:03:50:a1:5c:f4:48:8f:
         06:3f:fd:b3:03:45:3b:82:dd:e6:46:23:0b:3e:64:95:a2:86:
         99:5d:e9:2b:a4:c2:9b:f8:89:fe:e1:de:a8:6b:5b:e4:ac:a7:
         3e:af:17:a4:8c:9d:20:61:83:89:ea:3e:1d:a0:e6:9f:7f:9b:
         2f:3e:0c:2a:b6:82:e8:75:40:60:b1:72:70:53:71:6f:89:a6:
         1a:66:15:d7:68:8f:b7:18:46:b1:30:b8:67:9e:df:76:f0:41:
         1e:5e:07:0c:67:62:d3:a8:e1:55:9b:62:83:e7:06:bf:ef:f9:
         1d:b9:97:84:5b:74:04:7a:11:59:c9:39:aa:a9:1f:ac:0c:22:
         38:3c:96:f6:df:51:33:f9:a3:fa:75:bd:ed:e6:b7:5a:49:c2:
         45:9c:e2:f7:31:16:de:d8:e7:f2:78:72:b3:cb:60:53:9e:28:
         38:85:4d:66:4f:3a:10:e1:af:7d:04:43:47:f0:34:49:a4:6c:
         de:d6:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org