Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa
File:                     7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa (raw, json)
Hash identifier:          ZXAf7NdPlYRAkAllTIiSBcr1jlR+v617dJBJxv8yG/w=
Subject key identifier:   FE:39:5D:72:4A:C4:4F:CF:BE:31:25:95:E6:B4:B9:A1:08:F7:E9:F2
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F432858476E00FDA7B5A533C2B97D2000
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     397423
IP address blocks:        170.39.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fd:a7:b5:a5:33:c2:b9:7d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=d46b8f8b-d3b6-45d3-a41f-ed28175801f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:32:ba:17:4e:78:00:9a:b4:19:43:e5:d0:
                    df:52:66:32:b9:8c:cc:71:4b:43:0f:37:b8:0b:a6:
                    3e:08:9a:91:6a:6d:0a:f9:62:33:25:13:cd:60:c7:
                    8b:2e:ae:a8:12:07:74:75:5e:13:83:84:bf:b2:4d:
                    b3:46:76:56:e4:f8:76:36:9c:8c:81:93:75:5c:f6:
                    15:81:d2:20:e0:b6:bf:8e:aa:b5:9a:ba:15:a6:80:
                    db:4b:eb:5f:fc:8e:37:49:69:94:69:be:4a:26:6a:
                    08:ce:23:cd:1b:7e:10:d7:d0:d3:dd:43:a8:4e:da:
                    d1:48:99:ed:ef:69:ad:01:42:11:63:6c:77:f6:c4:
                    2d:5f:f4:15:a5:b4:c2:fb:0b:ad:2f:a1:7a:53:39:
                    2e:92:63:93:36:7d:f4:20:4f:ca:47:da:95:c6:3a:
                    ba:84:54:98:b7:49:cc:22:2c:a6:00:66:4c:21:ab:
                    16:67:a2:6b:b4:17:8d:e1:c1:e5:4c:d4:22:a7:55:
                    fe:4a:28:a1:f5:bb:13:5a:a0:c5:70:ac:17:52:1c:
                    2f:05:56:bf:39:bd:08:c8:9d:c2:df:bf:af:41:a6:
                    12:83:af:d1:00:d4:e0:aa:63:9a:34:ac:85:7e:d7:
                    8d:9a:03:fb:0c:08:08:45:0b:02:19:06:33:ea:28:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:5D:72:4A:C4:4F:CF:BE:31:25:95:E6:B4:B9:A1:08:F7:E9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:fa:41:47:73:4b:72:4e:93:36:ce:a8:6a:cb:a4:63:d7:7a:
         6f:3c:82:6b:77:f9:ca:3b:1e:e0:8b:b7:2c:fc:07:3a:71:ea:
         de:9e:30:40:bb:ab:2a:ed:11:cd:9d:41:37:1a:b2:72:71:84:
         e9:28:f7:fb:67:c7:72:ee:be:fd:87:94:f6:a3:8f:20:e6:db:
         ad:bb:c2:1b:45:0a:ec:63:43:a0:09:8e:61:7d:5c:32:20:cd:
         2d:74:da:1f:bc:19:18:c2:54:1e:1d:a7:c5:19:79:29:08:7f:
         99:c9:fe:f4:60:5e:9b:66:99:38:4b:cb:21:92:fd:01:32:83:
         d7:a9:89:94:53:a8:f9:19:12:05:64:a9:23:95:80:bb:7b:31:
         57:9e:e3:6a:d3:62:91:26:0e:9d:8f:ee:c2:81:43:97:3b:98:
         e8:1b:fa:b1:39:68:37:05:9c:27:22:c2:3c:ae:2b:ca:3a:5f:
         bd:e3:9f:6e:a9:98:61:e7:56:5b:4f:ad:33:83:df:b3:aa:9c:
         90:c0:fd:04:e5:cf:54:95:44:58:c1:ca:9a:f9:c4:33:f0:29:
         da:3a:21:34:b8:bb:2b:49:1c:74:ac:3c:02:56:8a:1d:46:72:
         a5:f2:3f:cd:a4:18:30:34:33:34:ad:d0:b9:4c:fc:77:71:bd:
         42:77:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:12 2024 by rpki-client on console-fra.rpki-client.org