Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa
File:                     25fc7d99-3882-3be7-a700-9d69920c8f76.roa (raw, json)
Hash identifier:          4ofrZ2yPIBEo7w5MsxHAEFeTQMJ3BL1VgV1rdppKBmg=
Subject key identifier:   B1:94:74:C6:77:AF:9A:9E:E9:73:D5:EB:70:CE:10:C3:D8:DA:DC:5C
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F43285847362B604B96CCAD4F26ED2AC0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     36666
IP address blocks:        67.215.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:60:4b:96:cc:ad:4f:26:ed:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=6acc1f14-6308-4eb9-af90-84d4c69814b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:0b:e5:c6:fb:df:53:af:d5:ae:c6:48:32:
                    2d:51:a0:be:9b:c0:29:d8:8f:11:a6:49:2b:e2:5f:
                    f8:9f:be:89:86:62:a5:cb:02:c3:e2:74:75:af:2d:
                    57:77:a8:ea:41:68:ec:6b:7f:db:91:9b:1c:3c:40:
                    e6:9d:8f:b3:30:c7:7b:f6:f8:08:5b:c4:f6:5a:3c:
                    04:1d:4c:94:db:54:2c:f4:54:ff:06:e7:06:3e:a6:
                    57:44:33:4d:1b:4b:86:9e:d7:13:c3:d3:d8:62:83:
                    f8:c6:01:d8:9e:52:e3:9e:d9:18:1a:66:f0:19:58:
                    1b:69:bc:81:6c:10:dd:58:6c:54:9a:a5:5b:86:ec:
                    4b:dc:63:90:ba:15:24:3c:8b:b6:f2:45:6e:47:49:
                    cb:1c:51:34:2c:f1:3d:f4:cf:d8:db:26:e3:3c:90:
                    9d:73:d7:aa:48:d8:3c:aa:06:50:9b:55:a2:ea:5f:
                    2e:24:83:a4:74:90:d7:88:93:0d:c0:aa:8b:b7:e7:
                    39:2c:64:0a:5b:4f:eb:99:c3:af:75:21:68:dc:8a:
                    d8:60:cc:95:0a:15:cc:b4:2a:ab:aa:33:5e:9f:48:
                    8c:e1:7f:04:cc:63:c9:cf:fa:fd:6e:11:e6:7d:25:
                    fe:9a:ce:4d:67:79:ae:c1:09:8a:b2:1f:86:1f:d5:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:74:C6:77:AF:9A:9E:E9:73:D5:EB:70:CE:10:C3:D8:DA:DC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:36:91:60:bf:e6:4c:71:57:1c:ff:aa:24:ad:d2:fb:f8:
         e8:79:7b:9c:42:51:80:91:ee:ee:c7:a8:2c:09:62:2b:d8:4f:
         f7:7e:8e:90:27:54:5c:59:68:01:51:f7:a0:63:eb:6f:4a:53:
         66:ad:a4:5b:7c:e2:f4:8f:69:56:d1:13:e8:c2:34:76:21:f2:
         1c:7c:26:21:5d:4f:53:ca:f2:14:8b:81:b7:6f:57:05:f5:97:
         c0:fd:e9:1d:8a:82:7a:bd:55:81:55:6c:35:4a:b4:b2:dd:6a:
         33:74:ed:2d:ed:38:9f:61:b8:76:88:52:e9:fe:ec:89:c1:06:
         c5:25:c3:97:70:8f:bf:c1:38:08:e1:a5:d8:27:b4:24:6e:30:
         2f:c4:92:8b:65:e5:d8:9c:a5:cb:42:64:cf:f6:01:ad:77:5f:
         44:29:a5:fe:9d:12:2c:2b:36:af:bc:79:88:d1:b2:24:03:f6:
         dd:a0:9d:3e:12:f6:8c:78:e4:9e:64:23:04:90:0b:b2:b7:6f:
         66:4a:d2:54:da:87:4a:71:ea:62:59:31:4e:d2:e7:aa:5c:0d:
         3d:05:25:53:65:3f:b4:a4:b5:bb:f8:b1:3e:a2:d1:f4:f7:a9:
         a8:66:c2:27:c3:f2:39:d8:72:bf:c4:0d:86:b6:d5:8b:39:83:
         c3:56:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:07 2024 by rpki-client on console-ams.rpki-client.org