Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa
File:                     bde921f9-630d-3469-bec3-ac3de6d723b6.roa (raw, json)
Hash identifier:          cM0FkfFt4sMel37msdKkjzVFCj4Sp7avIs1QQWfdwf8=
Subject key identifier:   36:16:6C:63:36:92:40:6C:F8:FA:21:2F:89:FB:EE:8B:20:B2:BB:49
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F43285847CFD4AA80A8389F2C53C4F9C0
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     11990
IP address blocks:        68.233.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:aa:80:a8:38:9f:2c:53:c4:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=98f9027f-9b75-40d2-8ab4-c76ceecf6b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:1d:ba:8f:f7:7d:8f:64:c2:46:1e:c8:d6:
                    5e:e3:4f:d3:7d:27:6a:0a:46:a8:b5:84:1c:9f:c5:
                    fc:d6:9d:99:5c:1d:24:22:54:f2:40:5a:da:72:46:
                    2c:a1:87:6c:ae:f2:88:f3:09:66:10:b4:9f:03:2b:
                    3a:5d:18:ad:32:0c:aa:3a:ea:81:1f:0f:9a:6b:09:
                    1b:e0:27:66:90:30:14:2a:6a:59:7a:12:24:7c:0f:
                    44:8d:d2:bf:f1:fc:a6:ef:f4:09:3a:e1:71:df:39:
                    dc:fb:6b:3d:c6:80:e7:86:2c:97:f0:a2:b4:6e:20:
                    51:4a:f7:51:19:6f:36:b4:b4:ee:02:29:e7:43:6d:
                    ca:6f:d8:ce:70:f2:25:58:43:63:62:b2:3a:ad:ff:
                    6b:7a:a3:e3:06:b8:5a:d3:3e:b2:ad:f1:aa:7a:da:
                    a3:99:fd:51:50:fc:d2:c3:d3:76:70:10:19:75:d7:
                    d0:ea:b5:8d:88:95:d6:29:9c:75:49:f1:34:4a:67:
                    c1:af:a6:2d:33:9f:9c:2a:51:ba:e7:c9:ed:01:e4:
                    4e:d8:eb:71:a2:6e:54:4f:63:28:d8:d8:ab:60:9e:
                    07:a5:12:22:62:07:89:33:1c:2b:04:8a:84:6e:5c:
                    00:50:95:fd:f4:7c:48:0b:ea:a8:95:4e:e5:e1:b2:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:6C:63:36:92:40:6C:F8:FA:21:2F:89:FB:EE:8B:20:B2:BB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:2f:22:8c:3f:18:dc:8e:68:a1:93:3e:46:40:d8:10:9c:
         2b:2e:d5:a6:3e:df:fd:b4:2e:45:37:51:83:10:26:91:bd:2c:
         35:01:3f:f8:01:ba:b8:a0:96:38:28:83:be:c0:ba:0f:df:03:
         36:37:43:ce:0b:a3:59:f1:3d:05:8d:2b:86:ae:c0:8c:ef:37:
         42:c4:9d:bf:53:9a:64:8b:db:1d:49:03:4d:a4:24:a9:25:ba:
         0d:c0:a9:94:71:cb:45:c8:50:c9:77:07:fd:4d:24:6c:f9:44:
         da:bc:b1:6e:07:01:91:86:92:82:61:06:fe:84:a2:60:6f:a5:
         4e:85:e6:46:52:5c:c1:e0:45:9d:85:fe:c2:c0:35:9c:36:c2:
         e3:63:2c:51:73:5f:a2:10:87:c7:27:ce:4d:f6:d3:16:19:d0:
         c8:ff:02:37:3e:54:45:09:a6:fc:2f:ee:eb:37:73:88:16:f1:
         22:26:c9:7e:c8:90:a4:8c:3c:66:72:f0:d9:a7:d8:aa:11:50:
         f7:cc:9d:ff:cd:89:ea:d2:e9:b6:fa:67:3b:12:ce:97:6a:e7:
         ca:80:a7:64:c2:8c:25:a4:b2:c7:cb:b2:bc:c7:88:35:05:38:
         14:0a:f0:58:13:7d:48:69:47:9c:bb:7e:f1:6a:ad:58:02:3a:
         22:da:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org