Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
File:                     00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa (raw, json)
Hash identifier:          IONkYTjC6iu3KWk9NTwRvPMFRpynHSOBDeTQvx08AXU=
Subject key identifier:   32:D7:30:B4:7F:EB:ED:DB:BD:08:94:14:25:77:33:D7:53:89:93:5C
Certificate issuer:       /CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
Certificate serial:       010D0C9F43285847CFD4D7AE5D245119050EA8E0
Authority key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     17120
IP address blocks:        204.81.0.0/16 maxlen: 18
                          204.82.0.0/16 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d7:ae:5d:24:51:19:05:0e:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=13edd2ba-d734-4431-858a-bb576263dd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:da:da:a3:12:fe:03:c6:91:5f:30:18:73:
                    31:d4:e8:dd:62:cd:25:b7:9e:5d:ec:cd:90:b7:c7:
                    0a:e5:5d:b9:24:b1:e6:f8:18:a5:87:45:3c:fe:6c:
                    3b:6d:ae:91:1f:48:01:3f:21:c4:cb:de:95:72:8a:
                    e1:59:15:13:11:a4:ce:1e:8a:07:f1:fc:9b:56:31:
                    0b:17:bb:12:55:87:a7:78:a4:68:bb:cc:81:6a:43:
                    21:f5:22:5f:d7:b8:9a:ed:c8:78:0d:60:99:c7:6d:
                    46:ed:31:04:96:3e:07:01:5b:de:32:ef:b5:e7:ba:
                    e4:70:bf:f9:76:42:44:f7:88:9f:44:07:cb:91:55:
                    d3:8e:ac:c4:e1:7f:11:ab:fb:b6:3b:98:ef:d5:89:
                    ea:92:dd:a2:35:8c:a7:ca:55:40:02:53:0a:70:69:
                    2f:e0:ac:2f:a8:b9:bc:3f:77:9b:90:12:b4:24:55:
                    e5:30:c9:40:06:b4:17:61:5b:b9:1d:d6:03:07:4e:
                    b8:c0:71:75:05:7e:e6:ba:36:69:87:87:30:f4:01:
                    b4:c6:bc:39:7d:42:97:d3:9a:ed:d5:ea:9f:68:da:
                    74:56:7a:de:7b:93:0c:33:ad:a7:3b:e0:d6:63:11:
                    99:41:98:df:8b:4c:e4:61:37:31:18:b1:8f:0f:f1:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:30:B4:7F:EB:ED:DB:BD:08:94:14:25:77:33:D7:53:89:93:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl

            X509v3 Authority Key Identifier:
                keyid:07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.81.0.0-204.82.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:02:d9:73:6f:51:1d:e8:5a:c1:7d:34:f5:4c:3a:80:be:
         37:93:bc:cf:64:b3:7e:45:60:29:ec:48:e2:29:10:aa:36:a3:
         18:ed:0b:42:bc:d6:2e:5e:62:aa:bc:ed:62:32:d8:7e:52:33:
         4c:19:f1:ea:b4:85:36:35:bb:99:cc:1c:31:3d:80:7f:63:e7:
         5a:ef:b6:56:35:15:a3:0f:8f:fb:d9:86:cc:c1:72:bc:2d:ca:
         e0:3a:bc:71:f6:5e:39:cd:ff:6c:c0:d4:01:9b:cc:68:ed:bd:
         9d:65:59:a3:90:6a:ab:65:ff:10:c0:11:86:ff:2e:67:21:44:
         90:64:e1:d0:60:0f:2d:29:6c:11:22:2b:58:66:5a:a4:e9:9d:
         79:c4:96:ef:5d:9d:0b:1c:be:cc:d7:81:53:88:e7:eb:3f:e5:
         dd:75:aa:28:e1:d8:15:d9:88:d5:24:43:39:25:62:e1:07:5a:
         ee:5e:7e:f8:09:d8:f7:fd:d0:bb:08:f5:d8:9c:52:2e:92:d1:
         03:03:b4:32:25:80:93:e4:60:de:2e:ad:28:99:18:f5:c1:bb:
         10:a8:ca:e5:c2:5e:b7:43:66:c6:5a:9a:fa:e7:e8:e3:39:db:
         6a:b5:de:07:9c:e1:2d:ff:a6:b2:5e:53:19:7c:62:66:00:9f:
         30:ca:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org