Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
File:                     ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa (raw, json)
Hash identifier:          EA4R3q15KimhlGfKl8D89F5ojaG3Ypi0JCCVhR/FUas=
Subject key identifier:   BD:FC:D8:E1:D8:72:04:23:83:8B:D6:AE:8F:35:F9:5B:65:38:62:B6
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F43285847A30BF1031F375BD549007800
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     396020
IP address blocks:        209.50.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f1:03:1f:37:5b:d5:49:00:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=3414239a-e1c6-4413-99a0-009dab4aee23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:2f:82:12:c4:13:37:b8:69:7b:b8:f7:2e:
                    35:66:58:27:f9:2e:b6:ed:69:6a:99:b8:0f:f2:41:
                    c5:7e:7e:48:9e:a3:f8:84:8a:a0:9b:69:04:7b:af:
                    d0:ff:61:a3:aa:6e:d8:22:70:ce:f6:be:63:32:e6:
                    5a:b3:0d:38:bf:00:fd:f9:a0:45:84:02:d5:71:41:
                    57:bb:ad:aa:ea:22:99:14:62:1c:97:18:53:c6:f0:
                    be:32:37:22:70:ee:5f:3c:6c:70:5d:a3:e3:d2:b8:
                    5a:c6:09:e4:ad:9e:dc:8d:17:f4:ff:9e:ab:23:3a:
                    2d:cd:3a:21:3e:02:82:93:9c:03:65:f9:7a:7a:8c:
                    7c:f2:f7:2f:32:bc:cb:09:3b:78:5f:87:2f:2b:0a:
                    0c:9b:1d:c9:92:0d:b7:51:d7:e3:96:8b:f6:f6:4f:
                    67:4b:66:35:78:f5:f1:cc:72:a7:6f:12:ec:10:46:
                    ca:8b:a5:62:39:30:4e:60:a2:52:90:05:02:a0:19:
                    60:d3:8d:77:b0:1b:21:dc:de:96:fb:03:76:19:99:
                    e4:6a:eb:58:73:e3:db:92:a4:c0:a5:9a:9e:cb:90:
                    cf:45:20:66:4d:f8:93:d2:bf:fe:a1:7b:fb:dc:9e:
                    f7:c4:60:7e:86:f8:ab:c3:bb:27:e2:2f:2d:64:76:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:D8:E1:D8:72:04:23:83:8B:D6:AE:8F:35:F9:5B:65:38:62:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:4f:ab:f9:90:1d:a5:a8:8d:8f:28:50:fc:12:4c:0e:3e:
         72:4e:71:77:6e:e5:d1:90:7b:06:de:95:fa:5e:4c:8c:09:f0:
         3c:c2:f6:70:21:99:69:df:a1:09:78:3c:b5:86:46:e0:ac:8d:
         a4:cc:a1:7b:18:29:04:e0:fa:88:d3:fe:4c:58:7b:ee:f8:25:
         8a:bf:5e:6a:2b:5f:42:54:52:df:17:67:23:39:1e:d5:98:e8:
         fe:51:de:6c:01:c8:2d:cc:18:81:fe:4c:0b:5d:02:a9:3a:1b:
         47:d7:ed:1c:0e:b0:64:32:03:3c:7a:b3:a4:db:ed:bc:41:2b:
         10:c3:54:56:0c:68:b1:c0:d4:25:ef:05:b4:4a:c6:5d:24:69:
         c2:7e:17:f9:97:58:65:af:58:8c:70:7e:7d:09:9b:1a:f8:22:
         bf:ec:69:96:8c:ea:4c:87:4e:7d:8a:1a:b4:11:1f:e5:e1:a7:
         5e:41:4d:29:91:59:e4:77:42:93:63:87:c2:64:6b:96:33:6e:
         66:9d:c4:52:b4:37:5e:a9:73:84:06:be:77:59:d5:35:98:dd:
         fd:73:af:64:7c:4d:28:5a:33:24:f2:36:fe:b1:4a:d2:10:49:
         04:2d:f2:72:34:82:41:e1:b6:62:1e:62:f4:a1:2e:f2:d1:17:
         f2:5d:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:13:02 2024 by rpki-client on console-fra.rpki-client.org