Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
File:                     58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json)
Hash identifier:          mYDmjsDAjIbEEr1wKCttUY8+Sc4oO977vQOwedBaO9U=
Subject key identifier:   73:EC:7E:AA:21:AB:FC:BA:C3:F9:A1:FA:50:7D:AA:4A:27:5F:CB:54
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F43285847C1DF5D2AC0702EBFD40E7EE0
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     393981
IP address blocks:        204.239.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5d:2a:c0:70:2e:bf:d4:0e:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=808ab12e-1757-43a6-8627-5661f872d05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:43:50:c6:ed:1f:a4:06:63:91:60:19:6a:
                    d7:5e:5a:ac:d8:ee:ff:76:f9:ae:53:f5:41:72:52:
                    61:2c:be:db:7e:63:e8:d5:ae:31:93:27:ed:f9:d2:
                    0e:c7:12:8b:99:43:d6:e9:1b:ac:11:b9:ce:16:41:
                    12:02:29:d6:d7:f0:f4:5e:ea:19:d6:66:4a:78:7d:
                    71:aa:c3:8b:b7:29:0b:9d:17:2e:e3:65:32:7e:be:
                    a5:6b:4e:2b:d9:19:7b:ec:15:28:8f:d9:d8:31:eb:
                    7d:c0:d6:10:fa:9e:23:11:49:9c:e1:c8:c4:4b:f6:
                    78:40:8a:d9:87:83:8f:43:1d:33:3c:02:d9:12:21:
                    a0:1e:b9:db:e0:31:b0:06:1c:5a:cd:9d:be:e2:64:
                    52:99:f3:d7:ae:c1:dd:3b:05:d6:60:a3:1c:d4:95:
                    e5:5a:47:85:88:e6:e6:79:d4:46:90:49:82:61:ed:
                    05:a7:58:d1:37:2c:ca:95:40:40:51:c9:4b:33:2f:
                    ff:c2:ed:44:36:3e:e5:5c:35:f1:ea:8d:d4:45:8a:
                    f6:8c:86:d3:86:36:b2:39:07:d7:b0:90:f1:f8:65:
                    a2:3f:72:b6:93:52:1f:31:a3:59:ee:e1:f1:81:f4:
                    0d:f2:cf:1f:99:8c:06:c6:fc:e0:bc:b3:44:88:bc:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:7E:AA:21:AB:FC:BA:C3:F9:A1:FA:50:7D:AA:4A:27:5F:CB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:f1:31:e3:f4:91:01:17:d6:d1:2f:cc:1d:c1:35:e2:83:
         bf:5e:43:fa:da:18:f0:48:93:90:50:c7:26:c4:0a:65:61:d2:
         f7:27:f8:f2:0f:0d:1d:c8:bf:79:18:92:03:fa:d9:07:00:74:
         97:38:53:c9:ae:55:2a:a0:16:93:69:3d:1b:d5:ec:b0:63:60:
         70:36:14:be:69:03:89:f7:3b:e9:32:e1:7f:6a:9f:ba:d5:b7:
         25:32:76:0e:b1:fe:50:d7:ec:a4:46:3c:45:ad:9c:e2:d4:ab:
         49:fa:21:76:0a:65:23:6c:65:38:5b:ce:0d:42:9c:cc:9f:7d:
         17:ae:95:f9:4f:a1:b5:40:e0:d1:f9:0b:3c:3e:a2:43:c8:40:
         72:bf:8e:4b:3c:90:28:83:fd:51:bf:96:73:ef:18:2f:36:ee:
         1b:92:04:c9:a8:e2:2c:b0:f7:5d:20:ab:cc:e1:c1:aa:3e:9b:
         25:20:e2:ee:19:22:bc:e0:8d:bf:92:a6:ae:03:b2:97:af:d5:
         50:25:ad:17:b9:d2:80:38:ad:96:98:51:73:ae:66:f3:fa:ef:
         2c:78:19:96:02:13:e1:ec:05:02:ab:72:eb:83:dc:9f:f6:dc:
         f5:7e:b4:e8:5c:c1:7c:39:69:52:dd:e3:38:36:26:fb:fa:7a:
         7f:e6:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org