Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa
File:                     3cbc27e2-5dcd-3467-af15-d37674866f33.roa (raw, json)
Hash identifier:          beXF7CcOWWE4x8e2nKR5DKzwYuKXn7PW4zUZfm25Dws=
Subject key identifier:   9A:70:3F:BB:1C:5D:91:FA:79:6D:7C:F1:2A:B5:40:1B:14:2F:38:80
Certificate issuer:       /CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
Certificate serial:       010D0C9F432858481B1FBD5D86D2567353CDAC80
Authority key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa
Signing time:             Thu 05 Dec 2024 13:17:40 +0000
ROA not before:           Thu 05 Dec 2024 13:17:40 +0000
ROA not after:            Wed 05 Mar 2025 13:17:40 +0000
asID:                     3925
IP address blocks:        173.214.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:1f:bd:5d:86:d2:56:73:53:cd:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
        Validity
            Not Before: Dec  5 13:17:40 2024 GMT
            Not After : Mar  5 13:17:40 2025 GMT
        Subject: CN=4523fdda-b83d-4785-a56a-06c274452993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:e0:fd:6f:cc:13:05:72:8e:23:14:00:04:
                    c5:41:2e:82:84:de:2b:d3:83:aa:99:ee:e0:c0:44:
                    4b:3b:a0:ac:8c:95:09:a7:5b:35:b5:f9:de:be:5b:
                    3f:7b:98:19:42:77:e8:5b:0a:31:bd:b9:a2:a0:a5:
                    70:47:7c:01:9c:c0:f3:dd:3b:c2:3f:48:14:0c:8a:
                    31:62:08:f3:ce:c3:66:ba:d0:03:81:a2:af:94:74:
                    8b:2e:9a:a5:73:d7:af:37:91:e9:fa:70:2e:c3:4b:
                    78:39:10:18:f5:4e:7a:89:ee:4d:f0:5d:e8:01:a6:
                    c9:fb:c2:5c:a4:a8:e0:0d:31:f4:3b:c3:5c:38:d9:
                    a5:dd:20:04:ac:b9:4e:a9:56:76:3d:26:c0:d2:51:
                    a7:3e:ed:80:c2:0c:78:71:03:61:99:b4:6b:b0:e2:
                    c0:95:81:81:09:4d:ec:4d:03:97:d5:46:b9:b7:59:
                    29:31:84:e4:cc:0f:4c:a9:c4:e1:1f:2a:63:e5:92:
                    ba:2e:2b:60:bf:02:b1:0c:6c:de:e0:e5:53:de:96:
                    15:ec:b3:e9:7f:a1:ab:87:3b:be:3b:66:2f:3c:ba:
                    43:e7:94:cf:ec:a6:71:25:a9:77:50:81:a0:31:c9:
                    1a:83:03:8e:a5:57:aa:f9:fe:13:63:43:cb:1d:80:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:3F:BB:1C:5D:91:FA:79:6D:7C:F1:2A:B5:40:1B:14:2F:38:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl

            X509v3 Authority Key Identifier:
                keyid:FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:30:42:7a:a3:43:05:04:74:4a:e8:4e:47:7c:3f:c1:47:ba:
         6a:85:35:05:8d:d5:c1:61:3f:85:5e:50:1f:50:d3:5b:92:74:
         e3:eb:7e:30:a5:1b:06:49:0f:75:11:02:24:0a:d1:75:cd:2d:
         af:5c:17:3d:ee:a7:58:aa:e3:41:92:e3:c4:ca:23:5e:8e:e9:
         ac:cc:1d:c8:52:29:44:98:22:8f:75:b6:f3:f9:1e:c6:5a:91:
         1b:a9:39:15:32:3b:73:af:66:b5:fe:6e:65:08:80:0b:fe:1e:
         a3:18:16:27:46:e2:c5:4e:d8:c2:b1:3d:b3:a4:90:91:59:0b:
         a3:5f:cf:be:6a:61:ac:79:e7:21:70:f1:e3:57:b4:b0:69:ee:
         dc:0a:16:2d:b1:11:48:cd:ae:ef:99:80:66:e0:14:aa:40:16:
         9c:c7:d2:8b:82:38:ac:ff:72:9b:aa:0b:5a:bf:6d:8c:d8:bd:
         d7:fb:89:ac:c0:31:0b:60:3f:40:10:cc:93:21:eb:8f:13:58:
         8a:d4:90:f2:72:42:ba:98:d2:5b:9d:03:a6:10:cd:a4:0e:c3:
         81:3a:0b:37:65:12:52:19:bd:65:f7:4a:68:37:3a:d2:07:26:
         91:bf:e6:c1:e8:4d:36:89:af:85:ec:1d:44:c2:84:81:30:5a:
         af:2d:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org