Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
File:                     658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json)
Hash identifier:          0SeNV2nP9y/hQuuoZSH//7aaeGE/nx1xPNVRFE9YNEI=
Subject key identifier:   EC:AD:B4:BB:45:1C:06:A8:B8:CB:31:C7:40:55:52:8D:DB:95:3B:0A
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F432858473A5B8B943F29CE12BC8C3A80
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     3737
IP address blocks:        204.186.0.0/16 maxlen: 24
                          209.50.128.0/19 maxlen: 24
                          209.173.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8b:94:3f:29:ce:12:bc:8c:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=d4ff3f25-3152-451e-8c16-cf25472bd012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:c0:ad:77:a0:68:c7:21:0b:be:25:59:3e:
                    36:0b:60:e5:1c:31:41:40:4c:4f:73:7b:70:76:03:
                    95:a9:71:a6:ef:d7:31:42:84:85:bd:e5:f0:94:10:
                    63:7d:1b:89:9d:fd:71:93:d6:0c:e2:b4:b7:0c:a3:
                    9f:ec:7c:f2:f5:03:d7:cf:f6:06:31:3f:3a:b2:c2:
                    08:da:94:f4:7e:6d:38:df:9a:b0:40:af:90:3b:b4:
                    13:21:48:19:79:7c:16:b7:80:6f:2d:c9:f6:6f:61:
                    c9:cf:e1:a8:05:84:53:4b:2b:61:08:9c:dc:2f:4d:
                    ff:cf:7e:bb:2d:01:7e:f9:ae:3c:6e:e4:ff:dd:70:
                    cf:1b:a5:90:c0:56:2b:94:ed:b0:c0:eb:5f:02:5d:
                    f5:ce:12:4e:2c:5b:d8:a0:a9:9f:44:9f:f7:a4:9d:
                    d4:34:77:5c:82:b7:de:89:b8:e6:d9:54:98:cf:cb:
                    7c:5b:39:3d:76:33:73:57:45:66:9b:21:c6:e6:35:
                    06:51:dd:1a:ea:74:92:5c:48:44:9c:cf:5f:ee:c5:
                    94:14:39:cc:bb:b8:80:2e:56:b5:99:2a:79:09:43:
                    89:43:37:cc:d7:76:86:fe:65:f2:b3:29:f8:d7:df:
                    0b:64:66:0c:56:35:0d:1f:ef:0a:7e:b9:00:91:fc:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:B4:BB:45:1C:06:A8:B8:CB:31:C7:40:55:52:8D:DB:95:3B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.186.0.0/16
                  209.50.128.0/19
                  209.173.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:25:40:5f:9b:9f:35:66:bb:c7:32:b8:df:a7:b8:45:59:
         f6:72:1c:e0:96:ac:12:16:4c:00:1a:ae:9a:3a:32:8c:61:e4:
         fc:23:55:9d:b1:75:aa:d9:ff:96:cc:da:61:4e:94:76:3f:c3:
         1d:bb:60:44:99:ef:91:31:cf:02:9e:d3:a0:3b:3b:57:e5:46:
         fa:8c:0f:07:18:c7:06:4e:a9:ed:f7:53:d4:05:34:ac:2b:95:
         d9:3c:a5:f1:95:c9:70:ff:02:a4:3f:55:8a:be:bc:25:0e:0e:
         66:23:cb:a9:7f:d5:71:9d:7b:1b:5b:b8:3e:f5:6b:cb:62:50:
         34:c8:46:17:5d:40:b9:03:23:fd:5d:1b:a9:a0:f5:dd:58:f9:
         f8:d2:9b:28:10:73:e5:be:26:80:6e:4a:82:09:23:68:1a:f4:
         0a:eb:73:e8:19:27:50:82:4f:78:ed:05:77:cd:f8:e6:f3:8e:
         b0:d7:42:6a:b1:0b:30:97:82:7e:45:c2:f2:aa:c0:8e:b4:6e:
         0e:3c:37:cd:1c:34:2e:0b:b9:e7:a9:d9:da:d2:fa:4b:9b:ac:
         a8:dd:57:16:03:ab:be:37:2c:76:56:9e:c5:cf:00:dd:49:d9:
         a3:ae:61:07:42:4a:76:1b:28:80:df:ee:8b:a5:42:11:7f:c6:
         46:10:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org