Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
File:                     2681e094-c5f0-376d-abe2-47d9d9497306.roa (raw, json)
Hash identifier:          /XVKvYTcOfvDBKLZDkDRAMI1hV/EOfCgA4hbMq10CVQ=
Subject key identifier:   5B:36:50:10:16:43:9C:29:56:5B:95:DD:C1:9E:51:81:3F:A3:7D:04
Certificate issuer:       /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial:       010D0C9F43285847600B98C406D1CCA5848AE980
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     36466
IP address blocks:        199.180.216.0/22 maxlen: 22
                          208.71.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:98:c4:06:d1:cc:a5:84:8a:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=15dcdd73-eb38-4058-986b-0edcb8a4c195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:ab:d5:60:0c:5a:a4:27:0f:94:a8:5c:76:
                    40:60:32:10:5b:80:5d:bf:9a:6e:cd:ec:b1:4e:91:
                    7a:6b:85:fb:ad:fa:b5:f4:98:79:e6:e8:a2:e7:c5:
                    6e:09:7b:84:9f:c4:c2:af:d5:54:47:4f:de:fb:f8:
                    84:31:ad:cd:cc:cd:11:19:a1:18:9c:8b:cc:27:75:
                    da:4a:59:78:e6:20:f1:ee:04:63:65:2a:b2:c3:f5:
                    54:1e:c8:85:9a:f2:75:d6:35:0b:b4:e1:77:a7:56:
                    e2:e2:27:63:8b:29:71:2b:71:cc:c0:e7:94:01:b4:
                    43:6d:64:18:03:32:ba:8c:66:3b:da:e7:1e:a2:46:
                    92:7e:ff:f6:8c:60:9e:f5:58:3d:3e:fe:ad:62:f8:
                    97:52:d6:0c:f2:4e:55:39:dd:b2:eb:ef:19:5e:02:
                    94:9c:ca:7c:1b:1a:eb:52:02:b4:03:53:8b:d3:c1:
                    79:a1:da:04:51:7f:a0:e8:fd:99:5c:0c:ff:ba:6f:
                    3e:dd:dd:dd:77:79:de:28:64:ef:a8:d6:7a:ea:d5:
                    f0:6c:02:a0:8d:b4:92:5c:1b:e8:5c:c7:3b:03:43:
                    26:41:70:a2:58:75:cd:6b:c6:28:d4:c0:78:f0:2d:
                    84:da:4a:a6:ea:cf:eb:6f:71:75:8c:cb:b3:b9:bb:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:50:10:16:43:9C:29:56:5B:95:DD:C1:9E:51:81:3F:A3:7D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl

            X509v3 Authority Key Identifier:
                keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.216.0/22
                  208.71.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:66:a5:da:cc:12:85:2f:f0:68:f2:83:37:c9:84:8a:82:
         de:d2:fc:2e:e1:7a:8c:84:12:09:2e:c6:2f:07:38:c2:ff:f2:
         5e:df:d9:28:4e:ad:7b:8c:89:7b:a8:42:4a:f3:33:54:95:43:
         5d:6f:38:7c:7e:8e:da:3f:7d:f2:14:36:c5:95:ec:70:c5:14:
         2a:d0:49:64:32:8d:35:bd:85:1a:3c:9e:a1:62:89:83:62:f2:
         a2:b4:c4:d9:41:06:69:bf:0c:f0:1d:ef:37:41:4c:d2:71:37:
         1f:a3:4b:af:9d:09:53:7d:6f:a9:90:58:38:b4:e0:08:16:c4:
         34:55:c1:b5:29:46:82:a8:11:b5:68:37:25:cf:49:78:b1:5b:
         83:fd:89:c6:5b:e0:f3:ec:cc:17:92:af:3a:1c:2a:0b:08:6b:
         5c:80:83:5f:a0:46:ed:68:05:8e:12:54:7a:0f:d8:ff:ca:64:
         05:3b:98:ed:9d:ed:dd:03:51:83:10:37:38:c2:f3:9c:9c:89:
         27:b0:3d:4f:5c:64:32:fd:3a:4c:1f:b6:0a:d2:31:40:9b:c1:
         32:eb:7a:e3:1e:8c:86:34:f5:71:6d:50:62:6e:0d:c1:47:19:
         f0:95:7a:14:09:22:c1:41:e6:a9:ce:f3:75:27:08:05:eb:f3:
         0c:bb:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:39 2024 by rpki-client on console-fra.rpki-client.org