Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
File:                     f6be008e-f3a8-3b2d-a921-07917a719383.roa (raw, json)
Hash identifier:          YY0vesKS1WiG0PnrzeNtY3HIZeloCct3lru2CO/E/aA=
Subject key identifier:   35:69:6A:B8:15:47:A6:CB:41:0C:90:D6:AF:84:1A:79:06:E1:8C:79
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285847CFD4AE2DBF1A0F45C78CA580
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     32554
IP address blocks:        216.162.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ae:2d:bf:1a:0f:45:c7:8c:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=8484ef29-8b51-472d-8124-a48c48441cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:ff:65:bf:fb:6b:a6:0b:63:b3:4e:af:95:
                    68:02:cc:a3:18:cd:6e:78:10:7c:48:6b:2f:b4:40:
                    a9:c7:9c:69:f1:8b:99:40:8a:9a:27:6c:cf:29:a9:
                    06:8f:be:32:9d:06:f9:20:c1:33:23:e0:0b:fd:9b:
                    33:3a:26:27:a3:49:1f:ef:70:5e:1c:ad:7f:1f:7d:
                    73:9a:00:29:6b:15:04:86:de:40:14:ba:a8:b1:21:
                    85:1a:be:25:46:a2:fd:dc:d1:ba:5c:34:3b:26:d0:
                    dc:68:21:a6:27:d8:5a:50:d2:2f:6d:cd:cf:96:db:
                    86:49:bd:2a:fb:ff:c0:e9:54:16:00:9f:9d:e2:53:
                    07:0f:e3:f5:49:7d:b3:e0:2c:77:63:4a:1a:c6:79:
                    8d:8b:a7:a1:b6:f8:0c:9d:a4:05:c5:fd:a5:a6:9c:
                    15:bc:f4:13:5b:31:ee:32:a8:03:eb:54:f5:88:b1:
                    b9:1f:b4:bb:80:1c:c3:97:32:85:57:4e:1a:91:64:
                    f0:93:d3:89:40:e2:65:b7:09:4d:52:1e:1c:b5:b5:
                    af:0e:c5:1b:6c:9c:f7:76:25:9a:7b:f6:62:c9:82:
                    87:66:7e:9e:1b:4e:81:17:04:b9:08:b9:02:c0:9f:
                    c9:8a:d1:fd:1b:3d:d8:86:82:3c:7d:f7:7a:a1:0f:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:6A:B8:15:47:A6:CB:41:0C:90:D6:AF:84:1A:79:06:E1:8C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:07:67:51:ef:12:d6:cb:5e:a1:10:cf:5c:00:e4:2d:01:
         40:f4:66:86:48:9d:da:0c:55:d1:92:25:0e:10:a8:13:a9:94:
         a1:6a:a4:3a:e5:d9:bd:d6:c1:94:56:15:32:f1:14:e3:8d:2a:
         25:21:73:e3:e8:88:06:6f:08:ed:35:e7:07:40:9e:8f:c1:84:
         e1:7b:10:4e:91:42:cc:b0:7b:20:98:9f:2a:f0:a9:c1:76:e8:
         3e:47:ac:76:74:96:97:40:81:8e:8b:61:ae:0e:e9:3b:6d:3a:
         35:20:e9:db:df:0c:e9:3b:c1:6b:80:2f:b4:e1:40:31:9c:da:
         b7:75:d7:b8:32:a2:92:c0:02:3a:2e:fe:43:e3:88:ab:51:f4:
         3e:d6:bc:fa:8e:56:37:b0:0b:18:84:a0:ca:6f:68:34:9d:c7:
         b6:e8:37:ad:be:19:49:e0:4d:ca:8e:36:37:92:87:68:7a:29:
         07:bf:38:82:97:ad:d7:48:cc:6f:d5:24:a5:0d:fc:14:29:02:
         a0:c1:82:2d:11:94:20:b6:a6:78:cc:f8:50:9b:20:a4:11:ee:
         63:52:92:15:39:cd:3c:42:21:9d:1b:52:13:d1:bf:ed:85:99:
         c7:1c:bd:f8:91:31:0c:2d:95:b4:15:7b:f9:b9:97:88:6d:bc:
         f9:64:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:11 2024 by rpki-client on console-ams.rpki-client.org