Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
File:                     0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa (raw, json)
Hash identifier:          /FDaiZY/ymHv49nt/nHtkCJgupR6E6pdvlbGeGhf+/I=
Subject key identifier:   20:34:6B:3A:F2:B4:E6:36:D9:CF:4B:08:A7:F8:EE:56:09:0C:75:E8
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285847600B9E1DE2EA398A796F0580
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        209.169.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9e:1d:e2:ea:39:8a:79:6f:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=c17bb494-9f9c-4589-b492-872d9fb45101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:31:12:62:a1:f1:b7:70:82:b0:ce:ca:91:
                    79:83:b8:c1:06:a2:e4:a0:cf:1e:5b:7c:5e:8f:fd:
                    fe:5a:c7:7f:d6:7b:05:87:e2:ee:dd:10:ce:08:8c:
                    a8:7f:d8:0b:dd:8b:57:bc:27:b9:bf:06:e4:49:dd:
                    8b:45:36:30:cb:20:ea:72:46:32:f6:fa:1b:70:8c:
                    6a:36:f3:b1:43:65:b0:9d:6f:5a:7b:a4:26:6c:4e:
                    dd:b4:35:af:7c:50:ea:d3:7f:77:98:45:2e:a1:42:
                    93:5a:2d:72:5c:10:4f:84:89:72:20:c4:11:17:19:
                    f2:42:e7:6e:96:01:47:a7:44:0e:cd:94:93:c8:c4:
                    f5:f4:21:48:24:0c:b2:8d:db:2e:56:41:0d:29:10:
                    2b:fc:b7:dd:7f:1a:3d:8d:be:a9:4b:f7:38:35:c0:
                    cf:63:ca:20:28:c3:b1:fb:8d:75:97:c4:c9:f2:f3:
                    c1:5d:22:c9:a8:c5:93:bb:ea:f8:51:0b:3c:f3:92:
                    c0:90:17:c2:32:ce:31:ce:11:30:ab:e5:22:e1:97:
                    53:59:e6:61:93:9d:a6:1b:4b:6a:61:78:5d:e3:02:
                    d2:bb:aa:34:f4:45:76:58:3e:7f:85:18:ee:67:c1:
                    64:3b:58:e2:63:76:2c:fa:ea:c8:7b:c0:83:d6:0d:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:6B:3A:F2:B4:E6:36:D9:CF:4B:08:A7:F8:EE:56:09:0C:75:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:20:24:4b:9d:d6:1c:74:90:d3:09:b6:20:0f:07:87:97:86:
         e7:10:1a:14:98:ea:ec:e1:51:6d:27:ed:b8:33:52:27:83:be:
         1a:3d:91:5e:25:5e:1d:9e:94:be:ef:48:bf:89:bb:8f:5b:88:
         ca:04:64:55:ff:68:87:b1:19:96:c7:d9:5a:38:8f:91:92:d3:
         a1:ba:3d:82:67:7f:88:0f:0a:55:3c:20:17:04:37:80:8c:3d:
         ca:f8:2a:8c:4e:31:37:41:a9:19:20:ee:20:3d:62:f1:df:6e:
         2b:aa:91:7e:b4:dc:7f:1c:77:1c:f5:25:e9:a4:06:c5:3f:70:
         1f:f9:48:02:b7:af:71:8a:f3:3e:63:02:d5:91:d4:d0:e1:dc:
         d3:f6:50:aa:81:ab:46:eb:3d:e3:ba:fa:7c:aa:69:b8:d4:3e:
         23:b9:7f:67:f4:10:0f:e3:b1:9c:7d:93:7f:ac:f8:23:52:d5:
         c2:ba:dd:11:12:36:cf:17:52:d8:9e:94:d7:aa:96:84:85:f4:
         5a:8d:19:f8:25:3a:44:81:6d:42:49:11:76:d6:e0:73:23:58:
         f1:d3:cf:57:70:ea:a7:57:c0:ba:fa:df:3e:80:64:99:59:fc:
         47:6c:6b:be:80:38:14:23:c6:1b:e1:c5:70:ba:9d:20:7d:17:
         35:eb:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:56 2024 by rpki-client on console-fra.rpki-client.org