Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
File:                     27d6fce4-3560-3856-9614-274232fb6eef.roa (raw, json)
Hash identifier:          rR4wJ0+wFPYo2euxauN65mj8NeNg9iXqEog8tTKtC3M=
Subject key identifier:   79:A9:49:35:4E:B4:6C:70:C0:9C:5F:FB:72:9E:B5:EC:7A:93:95:C1
Certificate issuer:       /CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
Certificate serial:       010D0C9F432858472F3085D08CEFCD7E4D7F3000
Authority key identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     209242
IP address blocks:        216.120.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:85:d0:8c:ef:cd:7e:4d:7f:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=8d2fb87a-9075-4400-b4f0-8922be233087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:e7:cc:f5:53:2d:03:2e:1a:d7:7d:87:4f:
                    be:97:55:fa:e2:73:35:5e:6d:85:1d:51:29:a1:59:
                    fc:45:3b:ef:72:94:8e:c8:31:69:5b:70:28:a6:a7:
                    76:28:ac:6b:d0:3b:38:91:3c:e3:ef:d7:e1:81:70:
                    1b:b3:6e:d1:3e:51:2a:98:94:83:17:bb:59:02:34:
                    52:07:08:36:41:b5:27:9d:04:65:4f:09:5f:2a:5f:
                    50:d1:b8:c6:87:c0:b1:df:07:24:c4:cb:70:02:6d:
                    4f:2a:e0:b4:7a:83:b1:e4:2e:fc:be:11:0d:dc:28:
                    a3:88:1b:cc:3a:a7:b9:71:dd:5f:89:48:45:41:9e:
                    3a:72:17:a1:52:d7:6b:cb:8c:e8:84:36:31:3f:90:
                    3d:3c:6a:79:ec:63:55:d4:f2:22:6f:33:52:36:a5:
                    7f:ea:fd:b7:36:fc:b4:f0:ea:af:b2:c0:57:dd:a6:
                    a5:d7:ab:2d:f7:73:90:23:94:c2:db:66:16:85:5f:
                    06:30:3a:ab:e0:8e:6b:0c:05:26:af:0a:2d:2c:94:
                    78:bd:5d:e6:ad:a9:d0:41:51:32:54:10:da:38:02:
                    5b:fa:7d:a9:de:34:20:6b:80:8e:20:f4:4d:12:0b:
                    9d:6a:1d:63:97:e4:b9:4f:7d:5c:42:3d:26:d9:48:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:49:35:4E:B4:6C:70:C0:9C:5F:FB:72:9E:B5:EC:7A:93:95:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:d6:de:ef:13:a5:47:55:e7:a2:66:0f:e0:0b:c7:76:cc:
         c6:52:ae:1f:9b:21:41:39:cf:4a:c0:b0:93:8a:1c:78:80:6b:
         22:5e:01:c1:2c:88:50:a0:07:74:5d:f4:85:33:63:7d:3b:b9:
         95:af:95:ee:aa:39:84:64:59:07:47:9a:6e:7a:61:3a:57:e9:
         5e:9b:60:f8:7e:4f:ac:ac:f7:68:cb:41:0d:2c:13:4f:4c:1d:
         a9:0b:b3:77:21:62:16:f8:10:b3:75:0b:95:ca:d8:5a:a2:9b:
         ea:0c:8e:0d:ff:6c:1b:55:94:a2:86:32:7a:98:06:c9:fe:69:
         22:73:9f:2b:78:fe:c0:62:bc:7b:ec:1c:0c:f9:ad:da:e7:7a:
         74:e1:f4:cd:a4:24:76:c7:2c:d8:90:7f:50:89:fd:d8:fc:ca:
         f1:2a:da:1d:be:12:46:00:68:ec:57:5a:a7:dd:38:7c:e9:57:
         1f:dc:7c:8f:68:4e:47:f2:b0:25:6f:3a:b8:5f:ce:aa:e7:29:
         5f:28:2e:39:46:d1:93:ba:0e:23:8f:99:34:2b:a7:05:78:d1:
         e7:3e:ae:66:b0:3b:33:94:ff:e4:83:c8:75:b5:eb:6e:27:47:
         4d:5e:9c:18:78:ee:42:85:01:bc:06:6c:a0:7b:0f:7e:03:8a:
         5e:68:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org