Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
File:                     5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa (raw, json)
Hash identifier:          2DN+WsCqXb5wIB2/DYU+kee8ev3TgVZ0GVJdB2b44OE=
Subject key identifier:   43:73:50:4B:5E:8A:A7:A9:D8:03:A8:48:71:2E:B1:3E:1A:44:A8:21
Certificate issuer:       /CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
Certificate serial:       010D0C9F432858473A5B9510D05654414EA080C0
Authority key identifier: 12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46244
IP address blocks:        208.93.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:95:10:d0:56:54:41:4e:a0:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=5a4a256f-b01d-4f07-9048-de4f4b9cad1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:2b:ed:96:28:25:8a:fa:70:70:5f:30:b7:
                    c1:a9:1e:51:fe:79:b0:69:71:20:b1:8e:e4:85:db:
                    38:3b:79:fb:90:8e:21:44:fc:c8:3d:0b:3f:10:ea:
                    06:fc:76:e8:5f:14:50:9a:b5:42:2c:30:99:8d:e6:
                    5a:4f:a1:26:37:75:a1:d0:6d:82:30:84:73:a7:87:
                    6b:80:56:54:e3:d0:44:29:2e:08:6f:87:d4:da:37:
                    31:18:5a:21:63:90:63:a7:da:3e:d9:5d:e8:e1:f2:
                    dc:ec:b9:f1:65:18:e4:16:72:d4:3c:a6:c9:f6:cd:
                    3d:f7:3d:c7:72:66:c7:04:f4:85:8a:11:33:4d:00:
                    c3:d1:1c:f7:dd:ef:06:2f:96:69:56:bc:0b:3c:8c:
                    84:e6:58:bb:fa:25:e1:e8:fd:92:50:dd:aa:49:6e:
                    b5:45:ed:9c:a7:df:d0:f8:92:54:0d:81:53:8b:a0:
                    17:83:a0:43:a5:f2:a8:dd:fd:33:36:90:f5:07:00:
                    95:04:93:e2:47:47:33:fd:6e:2a:2d:b9:ff:4b:01:
                    e1:e1:97:8f:b5:2d:36:01:28:31:0d:6e:b5:aa:01:
                    74:cc:35:72:15:01:bb:36:22:ad:80:51:29:9d:4e:
                    ea:9c:80:4b:0f:0a:60:fe:00:36:91:6d:3e:49:aa:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:50:4B:5E:8A:A7:A9:D8:03:A8:48:71:2E:B1:3E:1A:44:A8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.crl

            X509v3 Authority Key Identifier:
                keyid:12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:74:d0:55:83:8a:02:8a:cd:07:7e:05:37:df:50:00:da:49:
         8a:06:6a:3a:ab:6b:1c:42:7d:b8:99:17:78:07:94:a1:b4:b7:
         a0:09:d4:8e:31:68:fa:cd:df:7c:21:e2:3e:d7:32:28:25:51:
         26:01:c2:28:e1:0c:aa:6c:6c:1b:0e:fc:39:20:d8:70:c2:06:
         06:1b:be:10:ff:c6:25:60:d0:27:5b:dc:26:d8:b4:02:43:04:
         17:2a:9b:c5:1d:ac:1f:f1:b0:2c:15:ce:5c:f5:16:4d:0f:f0:
         52:6f:f3:47:a9:da:29:06:60:ba:a9:d8:40:f5:c7:dc:df:51:
         16:67:bb:7f:eb:67:e8:d3:66:8a:d1:54:30:b0:e9:d1:52:2f:
         3c:e6:e8:4e:9a:0d:3a:a3:94:ba:de:39:3a:31:68:7f:01:cf:
         7d:9d:73:0d:87:71:1c:ec:24:34:d9:f2:05:44:12:14:e3:bb:
         02:f3:3a:dc:b2:fe:5a:09:1b:9f:f7:40:63:a4:fe:d1:13:d6:
         a0:e4:89:ec:b6:50:4c:b7:21:c3:13:fe:2b:51:8b:75:d5:e6:
         32:9e:10:8e:87:9d:76:e1:36:9d:01:c2:10:b8:03:90:7d:30:
         f3:03:bb:f5:0b:b4:4b:a7:1f:da:53:f7:75:55:64:2b:ce:5e:
         4f:a4:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:41:03 2024 by rpki-client on console-fra.rpki-client.org