Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa
File:                     3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa (raw, json)
Hash identifier:          DwEKxrgOcsModC2sdajRiwRtu9F2J4+6/3WGkwxyIdA=
Subject key identifier:   AB:F1:B4:0F:8F:10:B6:4C:B8:EF:9D:4B:BD:44:99:64:57:81:51:DE
Certificate issuer:       /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial:       010D0C9F43285847BEF6CDD9E80888CFF3CCA200
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     18934
IP address blocks:        204.29.13.240/28 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:cd:d9:e8:08:88:cf:f3:cc:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d470e4d6-cf3e-4de0-8b1f-e7543a215cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:2f:2f:9a:64:42:f5:f9:41:8b:43:d6:8d:
                    20:15:66:2c:00:57:6a:d9:fb:59:36:cb:1a:6b:a0:
                    9b:ab:81:e9:f0:82:ae:5f:05:d2:f9:56:c5:6c:0a:
                    2c:81:24:82:5e:7c:cf:a4:91:5e:58:d2:75:91:32:
                    48:eb:5b:e2:af:c2:63:d4:b5:e0:df:fa:db:44:4f:
                    67:79:e3:fb:ed:a7:c2:b7:6e:d5:44:1f:9e:95:40:
                    ed:ad:81:37:ec:bb:72:90:b6:9a:7b:5e:66:eb:9c:
                    c0:26:d4:e2:fa:71:83:f0:5e:8c:0b:65:88:f0:9b:
                    1c:2c:e0:7a:10:45:3e:e4:92:02:23:fa:ea:54:cb:
                    f1:6d:b1:2b:78:aa:f1:67:c8:f7:82:d7:58:57:f5:
                    c0:e8:0f:9f:46:46:28:7b:9e:3f:f6:98:30:a6:c0:
                    d1:64:07:9f:41:ea:34:a7:27:d5:8a:fc:2b:da:8f:
                    aa:5b:05:24:5e:f8:bf:73:f2:e5:89:3a:4a:d4:89:
                    df:ea:d9:b1:23:10:03:5b:41:d3:2d:5b:f4:e3:24:
                    ab:6b:1b:67:b4:84:cc:78:90:14:6f:15:29:67:55:
                    5e:b1:53:5c:2b:c8:9f:44:60:b5:bf:2a:f5:54:ac:
                    1b:a2:0b:92:6c:b6:dd:19:6e:de:4e:3e:4f:f9:48:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F1:B4:0F:8F:10:B6:4C:B8:EF:9D:4B:BD:44:99:64:57:81:51:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl

            X509v3 Authority Key Identifier:
                keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.13.240/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:11:ef:f6:28:4b:d7:61:3a:5a:1f:63:8f:d2:58:39:d0:04:
         e2:c4:00:af:e0:c3:62:56:82:6c:86:61:25:4f:2d:b9:91:d2:
         8c:18:f0:48:a2:15:e8:1f:4a:f3:18:cc:81:9a:d1:55:ee:c3:
         34:29:4d:f1:de:99:c5:30:38:a2:53:0f:ad:ea:ca:df:7d:86:
         ac:6d:59:ad:c5:9a:2e:83:f2:b5:2f:99:03:94:32:ac:c9:4b:
         c9:b0:c5:30:95:18:88:93:0c:d8:44:8e:65:19:11:82:5d:c4:
         e9:24:df:9c:d1:3d:3e:e6:f6:2a:b9:db:d0:d6:fc:66:dc:66:
         a9:45:5b:68:c8:7b:0c:26:bd:44:35:be:69:aa:fa:46:7c:3c:
         01:3c:bd:33:15:f8:e4:61:02:d1:54:3e:9e:5d:fa:67:f9:5d:
         81:ab:66:05:90:e1:b5:e7:34:25:55:f8:3e:23:0f:3d:77:54:
         96:ea:ab:6b:37:78:77:9c:b5:bd:c6:e9:85:e6:ed:94:e0:78:
         70:26:6f:7f:42:ff:ca:20:ff:dd:69:a1:55:60:b8:0b:09:06:
         53:40:8e:21:d2:f4:1a:e1:e3:a5:12:84:62:08:bf:73:77:a9:
         30:cc:d7:a1:8c:b3:29:fe:46:fe:52:da:5b:a5:57:29:42:7a:
         99:37:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:44 2024 by rpki-client on console-fra.rpki-client.org