Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa
File:                     8bd5665c-f6f7-3013-925e-d7f67f871f97.roa (raw, json)
Hash identifier:          +zh/VIVZ5d4kzTMwC73pshZrdIqy3okCDKR4sa53ix0=
Subject key identifier:   6C:58:9A:2C:C7:8E:3F:B1:5C:B5:19:B5:9A:F8:C5:19:97:42:0D:9E
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F43285847EA5A12665A1A0C9AA2F21B00
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     16509
IP address blocks:        72.19.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:12:66:5a:1a:0c:9a:a2:f2:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=4baa8a26-999c-41b8-ba10-c0b6a314a078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:48:cc:26:7a:67:2f:55:99:c7:43:62:8d:
                    53:7a:a0:19:4e:0e:9f:e3:ad:32:a0:60:c8:90:79:
                    e4:32:84:2c:ed:a9:bc:e2:dd:24:a2:5d:4f:7c:4a:
                    26:e1:e6:67:cb:16:29:2d:1f:43:d4:4f:66:5c:c3:
                    2a:01:23:23:cc:09:d1:ba:c5:d5:57:e4:f3:d6:1f:
                    4e:8f:c7:cf:f0:2a:75:79:f0:e4:dc:e6:c1:f6:ac:
                    15:fc:04:3f:4b:bc:8d:df:d1:f8:5f:07:7f:71:89:
                    10:f4:9b:43:29:1f:89:3d:25:ad:a1:25:8e:d2:80:
                    6b:3a:58:5e:77:e3:cd:88:c4:58:fe:39:4a:d5:97:
                    04:86:6e:22:49:ca:2f:d7:b2:7d:8b:e6:f4:07:0f:
                    e3:46:a4:b7:b5:99:8e:1c:6e:70:ef:0e:a3:18:5c:
                    8e:19:c8:16:47:85:d5:66:b7:5c:f9:d4:65:c9:31:
                    4a:cc:18:04:2e:09:7d:17:cc:fb:e4:e3:dc:aa:da:
                    fe:a6:90:ed:1d:1f:71:53:28:e7:07:f7:10:ea:1b:
                    94:f9:5e:a4:52:1f:c4:b0:d8:8a:df:6f:b9:bb:63:
                    95:6f:81:cd:e6:7f:31:7c:d3:d6:96:16:04:6d:b0:
                    4e:aa:cc:15:d9:0a:4b:5c:18:ec:94:24:97:55:41:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:9A:2C:C7:8E:3F:B1:5C:B5:19:B5:9A:F8:C5:19:97:42:0D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cc:70:c0:b2:32:73:ba:1c:d5:29:8f:df:5d:cd:6e:4a:7a:
         f0:a7:41:ee:5e:f5:d1:68:5a:63:69:c1:4f:48:9b:be:0a:a3:
         52:e6:18:a3:d6:98:66:60:f9:85:ef:d0:aa:13:20:d8:3a:9a:
         22:13:5c:d7:15:b8:5b:f4:ca:af:a9:a9:0f:37:82:99:1b:70:
         f3:ff:5e:6e:fd:27:1b:3b:cd:0a:62:b5:62:02:65:f5:41:8c:
         9b:a8:ea:ba:25:46:68:31:cc:09:b5:79:ae:b2:c9:f5:8f:1d:
         b8:41:12:ba:11:a1:18:c0:a2:52:ea:11:c7:e4:3e:f9:1b:a2:
         cb:a9:40:c7:72:7a:da:ab:86:ba:8c:64:4a:4e:ab:dc:1b:69:
         cc:1d:1c:5f:a8:e8:5f:c9:e8:62:f4:5f:58:58:23:77:e4:ae:
         4d:95:7c:7e:46:2b:8d:42:8c:e9:25:a3:e0:64:19:b3:ef:c8:
         6e:b8:1e:af:9d:e7:0d:b7:7a:34:ef:d2:c2:6d:f5:ca:43:e2:
         d9:68:d0:d3:9c:1a:87:bb:40:c8:a8:c9:2f:8d:c1:05:4c:5e:
         1b:a9:24:6b:d4:f9:2b:c0:db:5e:30:8a:bc:8d:84:32:9c:aa:
         33:ee:20:06:be:c8:36:7c:57:1f:92:cc:69:c0:7e:12:86:00:
         48:98:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:52 2024 by rpki-client on console-ams.rpki-client.org