Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa
File:                     7675d262-4d44-3834-ab36-7be25716a0e4.roa (raw, json)
Hash identifier:          mAlvG2YoMySzDytZzKq2BIp4nEr5mOAMQ51JUosYVUM=
Subject key identifier:   49:A3:58:A3:B1:AC:A6:01:BD:BE:8B:3E:AC:44:7C:42:E9:19:0D:35
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584734C8883797A81DBD080E9CB0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     54994
IP address blocks:        209.9.208.0/24 maxlen: 24
                          209.9.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:88:37:97:a8:1d:bd:08:0e:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=880f2c98-186d-40ff-840d-e5f8987f27a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:f1:11:5e:0f:f7:49:d9:8c:fc:1d:a8:2c:
                    8d:63:a8:3f:6c:65:81:84:5c:b1:58:d2:b3:90:85:
                    21:3d:60:54:6d:35:8d:a4:9d:09:cf:fe:24:14:81:
                    b3:fe:c0:d1:d4:a7:63:72:87:93:fb:f7:a3:0b:74:
                    68:4f:a8:e6:c3:84:0e:75:ae:a8:cb:c6:1f:6d:fd:
                    51:17:38:3a:e7:30:42:f4:5a:98:c6:d1:46:11:1f:
                    a5:6b:89:56:96:61:f8:14:2c:26:ab:81:cd:12:4d:
                    e1:a6:e7:8c:3c:17:67:ba:3f:33:67:7a:81:fa:9e:
                    bf:ce:3a:34:6c:a9:00:bc:62:a9:83:b5:ae:f2:e4:
                    98:2b:27:8b:70:e2:62:2c:cb:c2:44:46:81:6b:2b:
                    a1:cd:6f:13:a6:17:b8:ce:cd:75:5d:d4:eb:9e:6e:
                    fe:11:0b:62:5c:29:b8:71:ec:2d:25:3b:9d:84:e8:
                    36:c5:02:85:74:e0:49:a3:db:da:23:72:8e:f5:60:
                    a9:bf:b4:07:02:34:b1:e4:12:54:58:dc:1d:96:c4:
                    a6:8f:8f:f3:45:9d:31:47:dc:59:4e:5d:b1:0b:da:
                    f4:69:98:45:c8:00:e0:29:1f:e8:48:5a:07:6c:8a:
                    51:94:54:31:39:a8:ca:f6:b2:76:2b:eb:22:97:57:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:58:A3:B1:AC:A6:01:BD:BE:8B:3E:AC:44:7C:42:E9:19:0D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:69:32:1c:34:5b:b0:41:6b:b0:ec:2c:46:d6:25:ea:a3:15:
         96:71:b1:86:83:e5:20:c0:9c:de:f3:9f:d8:14:73:38:ef:db:
         79:be:07:21:34:00:6d:44:d5:ae:d9:89:2e:6c:11:61:c1:e6:
         b6:0a:8d:4d:80:cc:db:ac:f5:25:18:d8:6f:0b:ea:d4:d5:b1:
         cd:95:ee:2e:f2:38:45:e4:90:fe:4f:17:83:d5:c1:eb:77:58:
         17:0d:7f:95:1f:69:2e:6f:e9:0b:b9:c7:a0:a5:d3:6e:83:d4:
         ab:f4:a3:b0:16:46:9f:0a:8c:f4:9d:9b:f0:9d:b4:74:f8:7f:
         db:3a:75:a7:7a:92:07:a9:dd:ee:34:1c:67:65:aa:ef:3b:37:
         d5:59:4e:18:a0:9d:bd:d2:37:8e:99:15:0a:0b:f3:3b:c2:7e:
         c7:f4:72:94:54:fe:8b:ad:09:af:91:13:ff:aa:c7:6a:24:52:
         fa:13:fc:fb:02:c2:32:82:b9:54:f1:e3:83:3e:18:ff:6a:4e:
         93:5f:5c:96:36:6c:c9:7e:c4:0f:53:6a:51:4e:73:7f:4b:6e:
         6e:95:7b:70:a6:9d:ab:c2:97:5d:65:f5:39:89:94:1d:b0:e9:
         22:58:b4:84:9e:0d:ae:e0:95:b4:ca:11:82:72:2e:83:68:64:
         f6:c8:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org