Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
File:                     b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa (raw, json)
Hash identifier:          A83ybPJptIlA46lUTpmGFx5vIJ7wPahTnK7fuXI3SuE=
Subject key identifier:   FE:A8:98:16:46:75:B4:79:D3:5D:AC:23:80:6E:1C:6F:9B:21:74:C7
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230EDB161E58968F6F03EF0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        207.230.112.0/24 maxlen: 24
                          207.230.113.0/24 maxlen: 24
                          207.230.117.0/24 maxlen: 24
                          207.230.118.0/23 maxlen: 23
                          207.230.124.0/24 maxlen: 24
                          207.230.125.0/24 maxlen: 24
                          207.230.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ed:b1:61:e5:89:68:f6:f0:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=45d66dca-db64-45d6-8bdd-8cf071499c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:db:2a:ea:21:a9:4a:03:35:6f:1e:4c:67:
                    eb:bf:15:70:97:3d:51:64:1f:fe:01:93:4f:8b:b0:
                    f5:be:f1:6e:e9:38:e8:d8:9c:21:33:21:9d:c1:99:
                    f9:64:86:03:1e:60:a0:09:56:22:20:65:19:2a:65:
                    a9:c1:3e:1e:99:06:1f:4b:c1:78:9c:d3:45:7c:2e:
                    cb:70:18:d7:86:2a:00:e1:5a:82:d8:19:0e:aa:cc:
                    f3:2b:45:9c:64:61:db:3e:df:0d:52:9d:cd:1c:22:
                    83:c7:8b:33:7d:64:0d:af:5b:b5:83:2a:68:51:3d:
                    ac:17:2a:b7:aa:89:a3:41:c3:dc:64:37:38:27:2b:
                    7b:54:44:95:81:ad:b1:d3:87:db:8f:d6:d2:92:7a:
                    fb:35:e2:f0:31:18:15:f0:20:b0:a3:7d:c0:d4:a9:
                    14:fc:da:f5:ca:fb:cc:90:74:b9:09:8e:aa:a8:5e:
                    8c:68:30:65:4d:83:21:33:66:3e:cc:f5:c8:74:1f:
                    f8:ca:a8:c8:9b:ef:7f:54:18:7d:92:92:39:4b:5b:
                    ec:43:98:0b:76:0e:f8:56:1d:69:81:61:c1:47:28:
                    04:1a:d2:e7:98:46:d9:59:38:5d:66:bc:f9:ed:08:
                    fb:0c:9d:98:87:d4:6a:0b:f4:95:fa:37:9b:69:fe:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:98:16:46:75:B4:79:D3:5D:AC:23:80:6E:1C:6F:9B:21:74:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.112.0/23
                  207.230.117.0-207.230.119.255
                  207.230.124.0-207.230.126.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:29:26:34:d0:61:4b:e9:f5:26:b4:88:78:06:47:95:0d:
         b2:b4:fd:4d:3d:ba:6d:b9:9b:9f:89:38:b0:e8:00:72:eb:a1:
         f4:b5:db:35:6b:f7:29:28:62:22:c0:d9:ec:a3:76:1b:60:1d:
         03:f7:91:08:8e:0b:f7:18:8a:f3:53:93:7a:8f:2b:b8:7f:78:
         fc:f8:63:78:78:cc:fd:e9:0b:2f:90:ee:5d:89:08:1f:03:d5:
         af:c0:53:1c:74:e1:0e:e9:49:65:ae:c5:d5:eb:6d:b1:aa:35:
         32:a5:72:4e:ee:9a:52:f1:d2:e2:96:b3:9c:73:b7:12:1c:ee:
         b3:2c:17:63:60:11:c4:1e:80:86:85:b8:7f:99:e7:d7:b8:3e:
         91:65:e4:34:c2:cb:27:ee:6e:99:f5:06:48:36:1b:4b:9a:29:
         ff:6d:ac:c8:8f:7d:db:6e:f8:9b:71:2d:e8:2d:2f:7e:45:d6:
         56:ee:53:cc:17:d4:82:bd:c9:d1:bf:72:74:f1:ca:e8:5b:4d:
         b0:25:e1:64:f7:a6:9a:bb:ad:fc:7b:5f:d6:64:ad:cc:3a:6a:
         ca:69:4e:14:0c:e8:08:59:b8:46:94:1d:dc:9c:9d:61:a8:4e:
         77:05:21:36:f7:e3:c1:d5:59:5c:ea:a8:d5:31:db:50:0e:25:
         c5:e1:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org