Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
File:                     5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa (raw, json)
Hash identifier:          7G2RaIJrySnWJ+W/4awq4B/pTEaKET7CaPgDj52k0pM=
Subject key identifier:   2F:81:D8:C6:9E:BA:27:26:40:31:DD:77:C9:0F:74:A8:2C:C4:37:54
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230EDC35159C805DB170E00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     40676
IP address blocks:        206.127.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ed:c3:51:59:c8:05:db:17:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=9783cc78-65ea-4980-b618-971963694b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:7b:80:b3:3a:22:75:3f:38:2a:c4:81:00:
                    97:ce:9b:83:f2:f8:5a:7e:52:36:8c:16:ec:72:2b:
                    6b:33:c4:8b:93:9e:7a:22:44:4f:e5:e6:a1:ca:3f:
                    b9:1a:16:3f:e5:c5:23:0a:d3:48:8a:d5:bb:68:dd:
                    93:09:b3:c8:28:69:1a:86:f6:91:70:61:21:9d:1a:
                    3f:b8:83:ab:b3:8f:0a:50:31:91:ff:03:15:02:cb:
                    2e:ce:70:1c:41:f9:60:d7:fc:89:78:a5:eb:5d:71:
                    4f:4d:8d:ea:63:5c:09:b3:2f:1a:85:d1:14:92:02:
                    11:c1:a8:84:e0:09:2b:f3:85:97:ff:58:75:af:af:
                    0b:73:23:bf:a8:9a:ca:ae:ac:4d:e0:7b:04:55:fe:
                    08:14:29:79:7f:13:a3:be:03:ea:8e:34:88:af:94:
                    72:a6:c0:6e:24:56:c2:21:dd:43:6b:3b:93:a3:62:
                    9f:1e:e8:b3:5f:70:dc:e1:73:97:f7:7d:9a:41:ab:
                    03:5e:e9:af:07:4c:be:c4:84:78:a1:e6:d8:e1:28:
                    db:06:62:ca:49:fc:99:65:a2:d6:e3:87:a0:17:87:
                    92:61:22:62:43:08:16:b2:98:02:49:33:e1:dc:d9:
                    ec:24:3f:d3:11:d4:97:eb:ee:d7:7c:b6:af:7c:42:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:D8:C6:9E:BA:27:26:40:31:DD:77:C9:0F:74:A8:2C:C4:37:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:58:ea:b9:8f:a0:23:36:b2:eb:71:18:e2:0d:18:ef:0d:a0:
         ad:4f:8d:f6:e9:e4:18:52:2c:09:6d:9e:6a:24:63:38:eb:12:
         e1:19:14:47:1a:29:53:f5:28:5b:00:5a:0c:e0:86:fc:54:b9:
         93:19:93:64:f8:e6:3f:75:19:9c:b6:9e:03:93:12:9e:ad:3d:
         b3:39:36:6b:ea:56:fe:29:bb:f8:5f:b6:ae:a8:8c:78:3f:81:
         c8:1b:ef:81:0e:84:88:50:43:1a:46:f2:51:94:3a:64:18:8b:
         60:4e:a4:33:0d:ca:88:17:bc:87:9e:fc:e7:9c:d8:52:55:40:
         22:dc:ba:39:51:08:a6:1e:61:ea:50:1c:5f:d6:0f:fc:2a:c9:
         80:6b:ca:e3:78:10:a4:f1:24:0c:c2:90:7f:70:83:47:d1:1e:
         bf:b5:ed:5c:0d:c3:51:17:94:43:4b:b0:fc:e2:6d:dd:c4:c6:
         03:6b:6c:a3:69:07:bb:15:11:e5:85:07:72:d4:1a:b6:28:84:
         53:0b:8d:20:fd:9c:69:fb:fb:a6:d6:96:1c:86:3f:e5:a3:67:
         ef:ab:5e:0a:be:c3:54:43:80:f9:c4:ff:4d:c2:91:e9:d6:d8:
         8e:8b:1d:0a:66:37:ef:9d:b8:09:08:0e:63:1f:ff:d1:76:57:
         ab:67:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org