Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
File:                     14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa (raw, json)
Hash identifier:          h9JW4EvuJGZ88X8rIBboe8QwvIx9+0uNXN3CpPie1ps=
Subject key identifier:   7F:CC:75:57:0D:06:43:14:4D:70:42:7F:83:09:EC:C8:A9:88:8B:C8
Certificate issuer:       /CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
Certificate serial:       010D0C9F432858480BDA676318C6E084C1F24B80
Authority key identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        192.206.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:67:63:18:c6:e0:84:c1:f2:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=8caab74f-a249-4b83-86fb-3ecd959ad31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:b2:9a:74:ba:f9:71:eb:35:d1:a2:67:4d:
                    70:4a:3d:64:25:33:71:64:31:09:e5:07:85:d1:7b:
                    d3:07:38:88:4a:4d:96:a1:c7:7f:88:7e:27:d9:59:
                    81:df:e8:f1:d9:80:ec:26:c7:dd:b5:91:c4:29:e4:
                    c5:e4:36:ee:a6:28:e6:e2:c7:63:50:4f:c8:71:f1:
                    50:20:eb:79:62:08:36:66:8d:63:e6:d6:dd:63:bc:
                    6a:92:b4:b6:90:bb:89:d5:6d:e3:da:85:fa:1f:d4:
                    7f:c2:2a:c9:ef:4c:08:b4:9f:eb:bd:32:07:d0:55:
                    90:bc:42:ff:db:d6:ba:a7:fb:87:ee:dd:c3:82:7a:
                    1d:69:96:53:6f:9b:4d:c5:a9:9a:50:7a:7e:66:14:
                    40:0d:1d:55:76:d2:00:aa:22:9f:e9:ef:e6:17:6e:
                    b2:98:56:b3:47:a3:5f:23:43:52:5b:f5:8b:68:55:
                    51:87:88:f4:8b:5e:51:4c:91:6c:26:c1:b8:40:69:
                    2f:6e:44:db:6a:c3:a2:7c:2e:60:b8:82:67:0a:8b:
                    37:43:01:a9:4d:9c:af:a5:08:02:f3:a7:de:35:a5:
                    0c:69:f0:e9:cb:f6:83:c5:e7:08:ca:26:d3:78:ec:
                    c7:5e:79:eb:1a:ea:31:19:a0:ce:9a:ec:67:d3:9e:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:75:57:0D:06:43:14:4D:70:42:7F:83:09:EC:C8:A9:88:8B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl

            X509v3 Authority Key Identifier:
                keyid:81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:5b:f4:a3:7a:19:b6:87:4d:80:78:30:0e:2f:fb:cc:21:
         26:3c:d2:07:1a:67:a6:2e:8d:b9:e4:38:6d:37:a8:d2:c5:a6:
         91:d3:d5:e8:63:46:c1:87:bc:40:f3:ba:1d:1e:7f:85:3d:93:
         5f:22:3f:cb:5a:d6:69:55:49:27:b0:26:86:71:39:f3:af:02:
         d8:b9:c5:03:a2:01:0a:2f:f2:89:85:79:b5:e2:3b:ce:19:38:
         d0:c2:6a:8f:e0:db:02:10:71:83:cd:38:13:08:12:be:e3:e6:
         da:a5:ce:28:fb:89:c2:0f:ac:98:f4:b7:90:da:dc:61:3a:3f:
         41:f5:5e:37:9c:2f:ec:80:fd:83:05:08:60:0b:c5:01:79:dd:
         7b:a5:6f:0f:e4:f4:a4:f3:6c:bb:9b:5a:a9:96:76:5a:47:9f:
         c9:d5:d9:a6:9d:2c:95:56:56:d1:09:d0:46:24:70:da:a3:6c:
         e9:a4:fa:fa:da:df:2d:3b:a4:09:56:53:f7:b6:01:ad:f2:70:
         97:22:3f:40:c1:e5:36:92:96:b8:fd:41:e2:26:b9:0e:cf:2a:
         d1:89:c9:ff:5a:bf:08:86:d6:d9:f5:28:89:9b:77:ec:83:61:
         07:42:b6:23:90:fe:a7:61:8d:da:b8:b2:94:9f:d7:43:64:2b:
         bc:33:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:01 2025 by rpki-client