Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa
File:                     c80cb437-d2fa-350c-bced-7fddd2666acd.roa (raw, json)
Hash identifier:          SVGFDhciQmlgxaVphwYRWqDIuAPtrgvFTcF1eQxqm3A=
Subject key identifier:   E2:39:69:66:18:1B:5F:60:6B:08:AD:ED:A3:4B:0A:50:A3:C3:2F:05
Certificate issuer:       /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Certificate serial:       010D0C9F4328584765A0EB43F2AD2ECF6E7C6280
Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     0
IP address blocks:        206.108.34.0/23 maxlen: 23
                          2001:504:1a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:eb:43:f2:ad:2e:cf:6e:7c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=41311a28-7609-4742-8bea-c005da89b600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:6f:f0:d8:3f:b4:ae:8b:39:70:6c:0e:75:
                    78:2d:ad:c8:1d:5d:ca:d6:be:2b:02:31:ff:df:ec:
                    be:45:52:60:78:7b:8a:88:3f:fe:aa:d7:c5:eb:9e:
                    fd:6a:e3:83:26:b0:9c:b2:fe:27:af:fd:7e:23:c8:
                    ee:e4:7f:78:1b:f5:fc:7d:26:bf:4c:7f:58:e8:b0:
                    e1:ba:f6:2a:e5:ee:66:31:5a:dd:43:1d:6b:1a:4e:
                    c1:fc:cb:da:70:a0:a7:b3:e2:a2:89:f2:94:bb:4e:
                    7e:01:79:60:5f:49:6f:5c:a4:21:d8:af:54:90:ba:
                    8e:fa:15:27:48:27:90:be:c3:46:83:e5:c5:64:d1:
                    0f:7d:49:ae:2d:91:3a:f9:db:be:1d:fa:ca:5a:4d:
                    ea:07:58:31:89:9e:f8:f9:76:99:cb:d8:04:d5:63:
                    27:2d:24:2a:76:12:59:a5:65:eb:81:00:2e:b2:e5:
                    30:9f:99:9a:8b:24:31:27:80:81:a3:e4:75:cb:f9:
                    97:c3:5e:b7:7b:1b:32:07:c7:71:64:58:d7:d6:33:
                    d6:89:3b:df:45:79:d6:92:27:16:1f:cf:c6:fb:e7:
                    e1:0b:88:3f:a6:4a:28:41:23:be:f0:c0:58:aa:a0:
                    ca:bf:4e:61:8b:84:19:21:a4:67:9c:0d:d2:a8:3f:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:69:66:18:1B:5F:60:6B:08:AD:ED:A3:4B:0A:50:A3:C3:2F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.34.0/23
                IPv6:
                  2001:504:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:58:20:1d:dc:9d:49:46:35:47:e8:28:6b:23:88:bf:e3:e8:
         08:66:4e:38:6f:12:25:90:fa:76:a4:75:69:fd:a4:1c:7c:4b:
         89:20:35:c6:24:40:10:4c:44:c1:be:55:65:af:67:72:81:91:
         20:8f:9c:dc:f9:90:dc:c6:9a:18:42:65:68:ec:05:b0:18:fe:
         96:86:59:73:69:32:19:ab:1a:fd:ac:5d:5f:75:9b:1e:07:ee:
         e2:41:8b:ac:19:f1:b0:47:8e:1b:e0:b2:78:7d:29:e0:59:44:
         4b:27:57:7b:63:0e:5f:f6:17:71:04:04:d0:84:de:e3:1d:54:
         06:a1:2a:3c:94:ba:88:00:4a:fa:c7:93:9e:4a:91:5d:d0:b3:
         c7:4a:a2:22:8a:a8:29:57:e1:cd:fa:e0:d9:fd:5f:55:ae:d5:
         8e:63:e8:fa:91:7d:83:17:b0:1d:60:da:4e:99:c5:25:72:d5:
         f5:25:f7:73:01:3d:e1:e2:ee:13:83:b0:45:72:77:14:3d:9a:
         02:23:2d:13:cf:d5:b0:f2:69:e6:52:8a:18:fd:1c:78:21:7c:
         64:2f:7c:f5:f7:51:8c:a5:2c:7f:df:9e:54:8f:19:51:48:87:
         30:cb:82:60:92:b2:5a:91:48:f4:95:79:4d:d4:b6:d3:05:f2:
         a4:c1:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org