Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa
File:                     84339d5a-c571-36e5-befa-38c9a65890dd.roa (raw, json)
Hash identifier:          zd2mhsh9PmeKE4qMdLPwO1loxIkCxqiJSWPa6FdNbhE=
Subject key identifier:   41:5C:CA:C3:71:FF:12:C5:51:E3:6E:75:FC:0C:5F:81:8F:A3:77:02
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F432858471A406B95AAC7E21756C04170
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     397606
IP address blocks:        64.52.102.0/23 maxlen: 24
                          170.39.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6b:95:aa:c7:e2:17:56:c0:41:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=06a0d28e-a1a9-4bed-9dba-55ebaf302579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:e9:b5:c6:72:a2:aa:58:de:56:ca:d3:a0:
                    ec:54:83:02:12:6d:42:b9:f5:e3:aa:a1:f2:69:ba:
                    bf:a9:a7:f4:cf:fb:81:cf:6e:9e:93:97:7e:1e:93:
                    2f:77:9b:79:7f:82:6c:1e:04:d2:f6:71:5b:c4:24:
                    cf:9a:a6:08:1b:8e:9f:96:40:1f:19:c4:e0:68:4f:
                    af:3c:8f:e5:a9:bc:02:c4:86:d5:66:6b:7f:a1:a8:
                    d9:a3:da:14:2b:31:ea:67:2d:b0:cc:c5:7f:a8:7c:
                    e8:a1:2a:a7:f5:07:5f:5d:0e:02:55:48:48:6c:6c:
                    38:65:6a:81:67:4d:47:2f:29:1c:92:bc:47:44:31:
                    02:67:f3:1c:23:8b:d7:b4:ba:cb:97:5b:bb:f6:b1:
                    5a:a2:23:08:18:e5:11:ad:2e:83:13:f8:87:fa:60:
                    29:2f:74:ab:88:89:bc:fd:2d:a2:30:c0:a9:c9:37:
                    58:ae:0d:08:76:1f:d4:cb:d7:8f:2b:6a:ee:1d:2c:
                    c3:e3:e7:26:3e:d4:04:bd:01:a2:f4:06:13:42:a7:
                    a7:a9:d4:25:e5:b0:87:0f:0d:f2:69:cc:2a:85:5b:
                    13:0c:cd:75:bb:5a:45:7f:8c:85:18:4e:3a:2d:5c:
                    b4:b0:15:cc:1a:58:8c:1e:99:ea:5c:9c:ae:97:0d:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:CA:C3:71:FF:12:C5:51:E3:6E:75:FC:0C:5F:81:8F:A3:77:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.102.0/23
                  170.39.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:eb:0b:10:74:64:7d:30:0e:53:b0:78:59:b2:43:58:59:
         4a:0b:d8:e4:9d:72:ad:04:75:0d:7c:f6:98:8e:f1:79:41:9c:
         5c:22:ea:b7:e7:5a:a3:ec:b4:e7:4b:27:e5:e5:29:a5:70:24:
         57:6d:5c:8e:3b:ab:34:da:d9:36:d3:7a:20:41:fd:98:94:56:
         1e:99:bf:e7:1a:8a:9b:e2:d4:76:5c:7d:0d:5d:02:77:ff:c8:
         45:a4:7d:0e:91:30:f4:03:f3:28:1c:42:c7:17:97:b6:f7:4e:
         d3:2c:3a:35:92:ba:7b:60:27:3e:4b:c0:06:b4:61:39:96:5e:
         39:d0:45:54:1d:2e:15:cd:f6:52:a5:1d:55:5d:26:34:77:cf:
         43:45:cb:1b:f8:cc:b7:a9:a5:28:4f:43:db:8f:4c:1a:87:e8:
         52:46:35:ef:6a:d3:73:5c:f5:72:93:d8:ce:dc:41:b3:75:78:
         d7:68:e9:e7:ca:63:d9:cb:fa:21:50:da:a1:cc:d9:54:b1:52:
         3b:f4:9b:17:24:a2:da:2f:d2:31:3b:3d:08:3d:2a:17:ee:c1:
         20:d9:b4:5d:35:59:d6:d8:05:a4:4a:bb:c6:ce:2e:b6:db:bb:
         a5:1b:5e:38:63:7d:33:dc:d9:7b:a9:aa:80:69:79:a4:b5:3b:
         b1:e3:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org