Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa
File:                     cc5a7709-a56d-3530-a29a-c30861d58af7.roa (raw, json)
Hash identifier:          OZcM6nVaj+ekJtcCIWwQw94XsDt9Efbr68tLfXMS2iI=
Subject key identifier:   17:5F:EF:81:A8:9E:47:A4:EE:1C:93:96:15:F8:B0:F3:FA:59:27:F7
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285846D475474DCC80F3C3BDBD2E60
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa
Signing time:             Sat 10 Aug 2024 13:00:39 +0000
ROA not before:           Sat 10 Aug 2024 13:00:39 +0000
ROA not after:            Fri 08 Nov 2024 14:00:39 +0000
asID:                     16509
IP address blocks:        204.155.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d4:75:47:4d:cc:80:f3:c3:bd:bd:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Aug 10 13:00:39 2024 GMT
            Not After : Nov  8 14:00:39 2024 GMT
        Subject: CN=db246409-2147-4800-bcab-7afecd957b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:be:61:ca:61:de:88:12:e0:bb:d8:6d:55:
                    d2:11:96:44:34:ca:ad:eb:cd:c6:4c:fd:87:68:cf:
                    45:d0:5f:0c:f1:42:12:51:81:e6:27:d4:54:7d:b6:
                    6a:59:7c:ef:1c:8d:dc:49:1e:c7:51:d1:7e:58:09:
                    fb:b6:03:20:62:d1:56:4d:62:f5:d1:6d:3a:9f:6c:
                    13:e5:d1:a0:cb:44:47:cf:05:4b:4f:b8:17:8f:1a:
                    8f:81:72:e2:18:3e:b6:de:47:25:13:66:2d:08:08:
                    bc:a9:91:e9:e0:92:c5:92:66:79:1d:eb:43:73:3b:
                    67:62:1d:fa:dc:65:3a:89:83:09:fd:38:4f:73:cd:
                    1c:5b:e0:5b:52:38:17:54:26:b7:28:1a:4e:58:71:
                    e3:85:04:2c:b3:be:da:2c:59:b4:87:4b:77:64:a6:
                    da:00:b9:8b:91:7f:3d:72:2e:89:e2:3d:80:81:19:
                    5b:06:3b:fb:9a:47:6e:3f:e1:04:19:21:30:c0:24:
                    94:2a:9c:49:dd:21:25:7e:ec:d4:88:06:cb:75:84:
                    45:50:4a:52:dd:31:e7:e9:85:d0:c9:93:f9:54:70:
                    4c:cb:92:8b:23:95:40:fe:1a:c7:0e:6d:67:05:7d:
                    b2:26:0c:46:6a:e0:45:f0:9c:d9:b2:cc:97:01:e4:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:EF:81:A8:9E:47:A4:EE:1C:93:96:15:F8:B0:F3:FA:59:27:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:94:69:21:e3:cb:c6:36:15:43:5e:7b:d2:18:47:cd:ce:
         fa:b4:a7:cb:35:00:4b:02:9a:3a:1d:8f:c2:a0:bc:f5:73:c1:
         01:14:39:e8:0a:b5:cc:4e:da:ef:fa:bf:4a:9b:aa:51:1d:7f:
         2f:ba:79:8a:69:7d:b6:a6:f0:83:f5:20:5a:2e:e8:8e:9f:db:
         99:ef:41:10:5e:5b:96:1a:ca:4d:de:19:d1:b1:2f:1c:66:b1:
         0c:df:b6:ba:ec:00:f1:aa:67:f8:f4:c6:e9:1c:59:c8:c8:56:
         20:0f:d3:18:6e:6c:c8:22:8b:f7:c7:6f:f8:7c:28:55:4b:45:
         20:d9:83:e5:6b:ab:9c:46:6d:dc:1a:2a:49:b7:d0:f5:45:15:
         fe:e3:29:b7:15:1e:53:5c:8f:70:0e:23:eb:ae:a3:6e:16:de:
         fe:1e:75:66:fc:a6:30:84:13:c9:42:ed:ac:14:83:61:2c:ef:
         b9:d9:c2:0c:86:94:f7:bd:0c:a8:a8:dd:6f:1d:75:72:80:51:
         7a:64:29:e8:37:ba:05:7c:60:91:dd:df:74:63:87:c4:46:79:
         f8:e1:7f:43:10:a8:54:7e:a6:5e:ee:cd:ec:e8:5c:d3:17:f9:
         b5:d0:a8:6c:b5:0b:6a:c8:59:9a:e8:e6:36:76:cf:f4:3d:6d:
         6f:19:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:33:46 2024 by rpki-client on console-fra.rpki-client.org