Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
File:                     05077994-8ee8-39a7-afa1-0dfc5986215b.roa (raw, json)
Hash identifier:          nFYJ5ru8JeK2Dc/em7//XJrSQYL7xpttTy2WBlNB8K0=
Subject key identifier:   23:3C:94:3D:FD:D9:3F:7D:0A:9E:49:54:29:7A:F0:C7:6A:8D:C7:BE
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76C2659CBDD736A0944C00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        206.12.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c2:65:9c:bd:d7:36:a0:94:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=037279b0-29a4-4b2d-960e-30b3016f175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:f2:33:32:4c:84:86:bb:e6:4a:fe:5b:9c:
                    28:61:d3:6b:70:34:21:a8:80:21:2d:4a:b5:08:55:
                    14:92:a6:95:d4:a9:a8:6c:f9:8b:53:54:72:84:06:
                    3e:95:eb:1d:4e:a5:b2:98:ac:76:23:1f:ab:32:81:
                    0d:a1:d3:53:a8:cb:e0:6a:74:7c:06:da:a4:49:9e:
                    7e:ff:81:68:09:3d:f2:e5:1d:9b:83:a5:9e:b2:a0:
                    ed:a0:56:d8:b2:11:9c:21:c8:c6:28:27:ed:d2:93:
                    bc:24:a4:1d:f4:7f:87:12:d3:69:c2:c7:0a:2a:55:
                    28:c4:17:d3:5c:5c:39:e9:90:c5:1c:3e:43:2d:7c:
                    8c:92:a8:b8:83:9d:b8:f4:ef:9b:f9:54:47:9c:71:
                    9d:27:df:82:b0:f0:2f:b0:1a:8d:56:15:14:b3:03:
                    35:0f:42:18:54:74:c4:15:5e:89:b4:92:99:b1:97:
                    c1:80:23:1f:9d:e9:a5:00:e2:99:9d:ed:5a:2f:d6:
                    ec:3a:d1:8c:7e:c9:ff:88:26:bb:20:9a:1b:c2:f8:
                    f5:88:ad:43:59:68:e0:63:5e:71:70:47:91:ab:37:
                    c2:1d:cc:4e:7d:a9:09:b7:b8:26:72:9a:1f:1c:c8:
                    f8:a3:20:94:58:3f:65:f8:77:db:a1:31:ce:f1:8f:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3C:94:3D:FD:D9:3F:7D:0A:9E:49:54:29:7A:F0:C7:6A:8D:C7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:8d:53:3f:dd:2a:d6:06:ef:bd:83:6b:25:97:b4:98:c1:
         31:76:a5:f1:85:be:d5:03:1a:94:df:51:0d:43:1f:8c:42:1d:
         98:80:f7:67:fb:84:0c:af:be:00:9d:70:d2:45:95:db:1b:7a:
         01:56:83:19:ef:67:56:31:31:e6:b2:8e:6e:83:49:f3:90:23:
         b5:eb:76:c4:00:06:b3:dd:ed:2f:2e:d6:c0:d6:44:c1:b3:80:
         35:a4:7f:88:0a:19:c8:1d:3f:44:13:a0:4b:4a:cd:33:14:d6:
         a0:6a:f6:76:84:b1:96:c1:72:89:1f:5d:17:5a:81:10:8e:3f:
         2d:6d:ff:d4:ca:4e:cb:3e:d8:05:02:b2:2d:cb:b9:75:aa:5c:
         33:74:79:2b:85:dc:fe:95:78:37:7b:20:82:c2:fa:d0:d3:b4:
         3d:71:01:c2:df:55:3b:dd:b6:18:9b:19:64:bc:e2:0d:d8:64:
         2c:e4:c1:92:00:54:2d:55:24:9a:82:56:7f:77:e3:0e:f7:7e:
         66:03:98:fc:ab:ee:63:ec:41:52:1c:db:53:98:09:74:bd:c5:
         86:1e:33:be:2c:bd:69:5b:4a:2b:22:4e:38:74:e8:c8:be:7e:
         4f:82:3e:67:ff:4f:52:e0:ed:44:3d:e7:5d:68:09:15:00:1a:
         a3:13:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org