Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File:                     ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier:          etBJpeqRDLbIv3h0FaVzACmjhkM7GN5FuwkGSoCEPMQ=
Subject key identifier:   A1:CC:4E:6E:DA:66:15:19:FD:EF:38:1C:AA:35:27:90:C6:2B:BF:C7
Certificate issuer:       /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial:       010D0C9F43285847792BB8B128729987BE83A200
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     36786
IP address blocks:        132.203.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b8:b1:28:72:99:87:be:83:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=450b85be-ed0f-473c-bdb1-e35ba58bf37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:72:56:d5:df:2d:4f:59:55:09:c5:e5:06:
                    52:e1:4c:d4:f7:67:03:cd:ab:48:a7:28:b5:01:d0:
                    92:f1:4c:ac:17:e3:97:5f:ce:49:f0:26:e1:7a:8d:
                    fe:50:90:5d:34:50:d3:31:10:75:d7:60:d9:32:3b:
                    1a:0a:95:ea:0b:b8:32:0d:3b:f4:c7:b7:30:e1:48:
                    7c:65:1c:d2:a6:d4:81:0b:9d:5c:c7:55:e8:56:87:
                    d3:1a:af:32:c2:3f:e6:c3:db:d0:ec:f4:34:c8:36:
                    d9:09:8e:4f:22:3b:ec:6e:8a:00:b0:d8:e1:03:27:
                    b6:ac:3c:bd:4d:0f:7c:9b:22:12:fd:9f:1d:4a:d7:
                    51:52:ea:c2:b6:c5:fc:f7:9d:ca:5a:cd:3a:09:54:
                    fd:cc:02:4e:55:dd:a1:d2:c2:d3:52:b1:b8:bd:5a:
                    c5:b7:53:68:4b:f6:b2:75:77:2c:86:ba:55:c6:1d:
                    44:76:f9:d6:a4:2c:6f:80:f9:a1:30:f4:ba:c8:ef:
                    e1:cc:f2:f5:ec:8d:ae:39:ac:56:3e:6f:2f:0c:d3:
                    2d:c5:7d:15:48:d6:81:b5:68:db:82:5e:cb:85:7e:
                    f2:7a:6a:0c:1c:2b:bb:e5:02:87:74:38:30:d9:f2:
                    3c:be:94:fb:ae:1d:e4:16:be:13:8d:14:99:0c:ad:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:4E:6E:DA:66:15:19:FD:EF:38:1C:AA:35:27:90:C6:2B:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl

            X509v3 Authority Key Identifier:
                keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:d2:e4:f6:4f:f5:db:c7:80:7f:b7:23:b5:d2:fd:05:b4:
         99:10:be:39:4f:1e:0c:c2:fa:6b:fd:4f:95:c1:1b:97:d2:99:
         1f:d6:fd:76:4c:ff:bb:67:24:d3:e7:79:6d:a8:40:e6:c4:5c:
         57:17:11:2f:27:7c:39:d2:2a:ab:0c:c6:3f:f1:44:69:16:6e:
         48:28:3e:c1:12:51:2a:ab:5a:fa:e1:26:c8:c9:6e:93:f3:6f:
         f6:99:90:bf:f3:ad:7a:9c:ea:7c:6b:23:20:38:d8:f5:00:e1:
         a0:e5:13:8a:9e:c7:67:a1:1a:95:b2:43:59:60:bc:64:da:1b:
         1b:ac:b1:ca:14:9d:c4:a9:e3:b1:72:e2:a5:ab:a6:a9:c6:8d:
         1b:c1:28:0d:c1:cf:3b:89:25:e7:c4:7c:e7:89:d6:59:e7:3b:
         22:58:92:e8:ed:b6:ef:fc:82:fa:75:a1:3c:dc:6a:0e:7f:54:
         6c:95:31:5c:f4:e5:17:f4:71:93:57:c4:39:df:35:59:f8:0a:
         81:91:80:2e:9c:a9:d2:79:e3:37:0f:53:49:ac:a3:85:4f:2f:
         25:3f:ae:54:5b:48:b8:43:f7:72:44:e3:63:a7:6e:ca:1b:26:
         04:35:8e:91:09:f9:90:89:88:4d:99:96:46:fe:e1:b4:37:58:
         65:1e:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org