Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
File:                     439be47f-ad79-3de0-a5e7-1bb882c73b27.roa (raw, json)
Hash identifier:          kUN9oUoWCi1+FIjjtlyOXlTz+tfNZ42iFuJ7UYHzjTM=
Subject key identifier:   33:5E:BE:A4:4C:A4:1C:72:F6:DD:A0:3E:CC:52:A5:D6:05:12:E7:AB
Certificate issuer:       /CN=3d270043-5069-4b58-b6cb-4496aa37669d
Certificate serial:       010D0C9F4328584765A0F014237E3E4A84DFDC00
Authority key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14079
IP address blocks:        207.2.112.0/22 maxlen: 22
                          2602:fbd4::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f0:14:23:7e:3e:4a:84:df:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d270043-5069-4b58-b6cb-4496aa37669d
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=235f4f00-5ce6-4e45-96dd-229b359adf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:6c:bc:5a:0b:a5:7d:17:d5:02:53:ff:16:
                    04:9a:65:b8:28:c4:6d:ad:9f:e4:4d:8f:b2:8d:a4:
                    66:c9:49:54:38:01:ad:ac:b2:28:49:89:1e:70:86:
                    fd:ae:80:4e:d6:e5:cf:a6:cf:06:64:ea:03:af:9f:
                    3a:34:61:76:24:c6:5a:58:59:db:1f:f3:90:aa:88:
                    fd:a1:cb:6f:08:22:c7:0b:bd:31:00:0c:76:27:73:
                    e6:b7:ea:6f:28:bd:6a:a2:47:bb:64:37:0d:17:56:
                    fc:89:0b:80:c6:3c:0f:d9:04:42:2c:31:c9:a0:32:
                    e0:ed:1b:90:0c:a0:14:9a:83:64:b4:c1:8e:33:bb:
                    fd:4b:ac:d9:60:ec:13:db:5f:3c:ab:3a:63:3d:dc:
                    df:f5:7a:c5:e4:59:70:07:95:28:27:b9:1d:17:59:
                    0d:90:a2:29:9c:c4:28:b6:03:3f:c2:1a:fe:b7:b5:
                    a8:cc:78:e8:bc:8b:30:26:e2:25:45:c6:bf:86:b2:
                    ad:0a:e0:ec:f3:ea:36:a6:a1:db:c4:ee:a0:39:af:
                    43:25:40:fe:d2:7b:0f:66:33:df:2c:a3:87:ba:c7:
                    f4:15:ab:b5:f6:fd:4a:4c:86:8a:b0:ae:7b:57:06:
                    4a:38:49:7d:52:ee:dc:6c:0e:26:d0:bf:50:eb:56:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5E:BE:A4:4C:A4:1C:72:F6:DD:A0:3E:CC:52:A5:D6:05:12:E7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.112.0/22
                IPv6:
                  2602:fbd4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:58:a6:ed:73:75:52:a8:7a:75:2f:db:a1:7e:8c:28:19:
         54:1d:a6:42:e5:0e:7e:24:e5:85:e9:f1:eb:d4:f6:3a:d7:74:
         fc:d8:66:8d:ac:f8:28:05:5b:cb:f0:c5:56:ec:bd:7a:ed:f9:
         15:bf:e3:1f:85:d5:8c:87:4d:4a:06:95:6b:2f:c4:4f:0c:1e:
         06:82:d0:88:2e:89:fb:81:36:05:bf:e8:ea:29:9b:fa:de:33:
         5f:99:1a:54:12:1e:2b:52:e9:a2:1e:9f:32:6a:e9:b9:6d:4c:
         69:bd:c2:5e:30:cd:93:22:c4:83:61:0c:3f:4f:9d:3e:1f:70:
         9b:75:b0:e6:78:b2:d5:09:5e:6a:32:de:dd:f5:b2:76:ea:78:
         75:cc:8f:6a:0e:cf:7c:6f:73:97:38:0a:d4:33:d8:8f:9f:61:
         d3:56:25:f5:8c:ff:9f:1f:bc:5a:91:8c:4f:b5:0e:95:86:21:
         28:5a:e5:66:f9:89:1f:8d:ed:77:27:67:47:49:73:c3:ea:98:
         92:f2:cb:f2:70:09:6d:57:f1:94:43:f9:c4:71:04:08:c0:26:
         eb:c1:f0:8d:4c:bd:f5:6b:50:72:3a:52:7d:3d:5a:e8:70:e5:
         45:e3:f9:c1:bb:2a:b7:31:f0:1e:02:94:f4:4c:5d:c7:7b:29:
         b3:f9:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org