Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa
File:                     5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa (raw, json)
Hash identifier:          XzIuT9OA0b+VivaaCwRWfg53FyrS8CPt+5uyrmWWndE=
Subject key identifier:   C4:B2:DB:A5:1B:CE:C7:31:18:90:DE:72:FD:56:47:41:8D:B5:19:C8
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F43285847213B0DED23DE41DAF0443080
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     16654
IP address blocks:        162.219.204.0/22 maxlen: 24
                          208.64.76.0/22 maxlen: 24
                          208.85.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0d:ed:23:de:41:da:f0:44:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=b063a628-285d-4757-8be6-795ad500c834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:2f:ba:62:4e:c4:43:0f:10:4f:ed:88:c9:
                    d2:9e:fe:38:8b:aa:84:64:4f:14:14:15:3d:8f:da:
                    97:46:81:9e:fd:59:73:6f:a5:0f:2c:7e:19:bb:d1:
                    33:7b:05:a9:e4:34:fb:cb:30:e0:51:60:27:c6:29:
                    9a:75:92:16:de:4c:76:a0:51:4f:ea:7f:6b:a2:2b:
                    58:a6:16:d0:ba:7c:74:4a:ba:0e:0e:da:74:4b:67:
                    d4:39:9c:a3:0e:b9:e1:34:2f:2f:91:c8:8c:5f:b8:
                    01:95:57:06:ea:d1:b2:b1:47:9e:79:58:fa:e2:8d:
                    c6:0b:53:57:18:46:75:6f:b3:56:1e:43:4b:21:5b:
                    04:a6:45:d3:db:96:47:3f:c5:e3:52:8b:89:e7:42:
                    b0:63:3c:17:6e:43:c6:32:ed:63:2a:82:67:b6:52:
                    d1:82:5c:30:e4:85:3b:30:c7:67:3c:03:5e:3f:06:
                    5b:9f:44:c1:21:e1:cb:a4:7c:76:dd:1d:6b:9a:34:
                    86:38:d4:af:04:10:0d:75:19:dd:1b:6d:4f:88:6c:
                    3e:4a:71:97:87:2d:ae:32:1c:5b:67:c2:19:ca:53:
                    f8:14:16:bf:74:ef:f3:31:84:6b:a6:bb:e1:04:56:
                    67:b3:1d:d4:a4:5b:88:3b:b6:36:da:9b:7a:b1:42:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:DB:A5:1B:CE:C7:31:18:90:DE:72:FD:56:47:41:8D:B5:19:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.204.0/22
                  208.64.76.0/22
                  208.85.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:72:bd:35:6e:f3:47:83:e8:20:41:ff:19:fd:a7:ca:6b:
         bf:26:c8:45:c9:a5:ab:38:48:1a:a6:23:f4:39:71:c5:74:92:
         e8:f0:82:da:2b:7d:6f:a1:cc:b4:29:2a:6b:0a:bf:8e:bc:90:
         5b:ce:57:e8:4d:c2:3e:39:6b:d9:63:57:9d:d0:2e:33:6d:86:
         c7:41:c3:71:07:15:39:f7:0c:a8:c1:44:0d:9a:72:15:0e:b6:
         35:32:22:74:29:97:d6:c8:89:16:a6:39:c7:8f:c4:3b:b6:eb:
         fc:1c:d5:c8:6d:b1:70:e1:4c:06:52:2d:6b:71:0c:35:01:00:
         7f:fb:dd:8d:55:d3:82:36:64:7c:47:04:d4:4f:f7:72:b8:dc:
         58:2b:1b:cc:cb:92:d7:f1:6f:ca:b2:16:c1:68:82:38:cc:cd:
         91:68:e9:16:f7:13:bc:33:4c:5a:d5:a0:b3:e9:7a:c5:9f:f3:
         12:85:1a:80:9a:15:65:dc:a0:c3:2c:18:2c:3c:86:f4:6d:cf:
         b6:c7:a3:c0:83:4f:39:b1:85:be:11:ca:36:4e:4c:51:21:96:
         8c:ac:87:b4:da:c7:c2:26:f5:98:ac:7a:ef:ad:70:c6:b5:a4:
         ed:ab:40:32:e5:e2:3d:1d:cd:1d:d1:c2:9b:70:84:c1:1b:12:
         6b:97:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:31:35 2024 by rpki-client on console-ams.rpki-client.org