Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
File:                     debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa (raw, json)
Hash identifier:          gn8lb/NOiDlMprXurbxQw5I6ASUrViyK6fcXPYRI7zs=
Subject key identifier:   03:19:BB:40:CF:DB:12:76:1B:B4:B6:BD:7E:1E:9E:AE:A1:74:DF:F6
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F43285847537B6D9E7D4BDE09A5535780
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     13494
IP address blocks:        206.220.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6d:9e:7d:4b:de:09:a5:53:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=61ba217e-fe9f-485c-ae97-e5a630de1223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:da:ca:62:5a:f1:80:47:53:f5:2d:1a:18:
                    15:c9:3c:b3:7a:7b:26:a0:93:2f:09:c9:0a:c1:25:
                    49:60:6a:a7:67:73:c4:db:42:83:19:67:be:4c:ea:
                    ac:58:55:e4:24:53:b0:d4:d2:6d:6e:bc:7f:05:51:
                    7d:3e:71:31:e9:cd:15:97:e5:93:9d:4d:a8:f0:32:
                    96:91:9d:5b:dc:21:44:91:4d:36:e8:f5:c6:22:9a:
                    f1:70:b4:e3:c1:6e:65:8e:8b:5c:65:24:76:8b:07:
                    e3:82:c4:1c:85:3b:2f:69:8c:2e:d9:63:2a:bf:3e:
                    c7:2e:af:8a:09:94:ec:29:ea:32:1c:51:ad:83:bb:
                    cf:b4:3c:4f:c0:58:15:75:ff:e0:16:11:22:3e:8b:
                    32:e0:bb:ff:ef:a7:7e:0e:8c:9b:6c:60:57:b4:4b:
                    e1:e7:d6:e0:27:0e:81:b4:4b:dd:6f:be:17:d9:d0:
                    47:86:28:7a:1c:96:af:28:a2:1e:b0:6b:aa:b3:16:
                    c5:aa:39:c5:e5:23:05:1d:8d:4d:f9:9b:23:51:a9:
                    30:63:f4:79:38:be:c3:a9:3f:af:51:4b:01:a9:9a:
                    11:1e:2f:2a:7b:30:42:68:3e:f1:38:a4:eb:18:ab:
                    f6:6c:2f:13:98:cb:80:73:e4:90:1b:dd:39:2b:88:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:19:BB:40:CF:DB:12:76:1B:B4:B6:BD:7E:1E:9E:AE:A1:74:DF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:6b:7f:30:f0:07:74:e0:58:e2:aa:0b:a0:74:c7:f8:a1:
         14:80:ba:79:09:ae:fa:73:4f:09:7f:4c:98:43:ce:5b:20:58:
         46:02:6d:5f:b2:1c:00:c7:67:96:e1:cd:75:71:89:ed:bc:6c:
         3b:cc:ea:9b:30:cf:e1:67:f2:d1:00:3b:f2:00:49:15:21:b0:
         26:32:67:da:f2:7e:ca:72:6a:c3:b1:31:b6:11:c3:19:92:46:
         6b:2a:d6:f7:8b:e5:62:66:4f:97:e8:29:78:cb:56:1e:fd:65:
         64:65:62:ca:19:dc:4e:70:2a:4e:6e:a3:a1:df:8d:b3:20:4f:
         df:0e:eb:7a:2e:98:5b:e0:ed:ae:a6:db:cb:cb:b2:a6:b8:3e:
         76:37:f7:c9:6a:87:0e:10:ef:81:bc:4a:6c:81:5d:17:1d:60:
         9b:e3:fc:ef:d3:ee:24:4f:49:2a:09:bf:34:49:fb:aa:df:c9:
         07:1b:0b:de:e7:87:5f:e2:7c:b0:28:a9:03:e0:2b:20:ae:6e:
         46:4e:5e:ce:b1:18:fc:73:a9:97:e1:3a:33:78:8c:c8:95:c3:
         18:0e:a4:14:f3:12:68:6e:18:c9:75:52:91:5d:b3:73:a1:94:
         19:a9:02:cc:b2:f4:39:52:1d:e9:55:09:90:73:67:1a:54:91:
         bf:08:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org