Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa
File:                     9b95030b-a993-3973-92d4-5063b41f1b1b.roa (raw, json)
Hash identifier:          hoYEJRTAXM8N/NJGt1eSU80ygAMT4wLZIf/f2dzx+vM=
Subject key identifier:   24:DC:78:0E:61:C5:07:E9:F6:E3:C9:7F:7D:AC:47:0F:2F:F4:B3:66
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858477BF659787192DE892817E320
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        207.202.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:59:78:71:92:de:89:28:17:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=63beb28b-88c6-453b-a663-6676bbf514c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:82:19:1c:78:60:87:d1:5c:bb:7d:34:9d:c5:
                    9f:3d:5f:2f:4d:e3:8e:3f:52:04:cd:51:fb:71:5b:
                    34:ce:87:ee:69:7d:e8:6a:d8:a0:7d:bc:b2:7b:29:
                    aa:f1:e8:3f:82:23:ca:fa:bb:01:9c:d7:87:e8:29:
                    d0:b0:a8:62:ee:05:d3:8c:68:e3:f9:67:7c:f4:e5:
                    14:e0:a3:16:3a:24:a0:19:86:bf:50:69:34:96:b7:
                    94:17:13:ef:dc:34:25:60:bc:fb:a7:df:ff:d6:7a:
                    a2:a1:6c:d2:9d:e1:dd:7f:b1:2c:f0:7c:ab:55:b2:
                    d1:d2:54:98:fc:da:1f:c3:76:44:d8:b4:ba:dd:ba:
                    26:11:53:ea:e3:e4:2e:8f:04:25:7d:eb:17:db:33:
                    5f:f7:d2:cc:a3:e3:3e:4a:4e:bd:04:cd:be:f7:4b:
                    7d:62:7f:48:9f:2a:86:fe:ab:0c:62:69:41:fa:93:
                    22:77:71:8b:b4:1e:f4:3e:dc:35:d9:ec:70:ce:c9:
                    9a:26:19:ef:9d:a5:e6:04:70:38:40:d1:24:47:1f:
                    fd:f7:37:be:2c:30:a6:0e:b7:dc:81:1c:c0:8c:dc:
                    63:35:c2:2f:a8:84:b7:7b:a8:bd:d8:73:07:d2:a6:
                    d6:83:d4:1c:78:a9:8d:7e:6a:ae:59:9d:3b:d3:d2:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:78:0E:61:C5:07:E9:F6:E3:C9:7F:7D:AC:47:0F:2F:F4:B3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:86:1d:25:3e:65:09:25:a3:e3:2f:47:a1:a9:5c:64:48:
         ae:55:15:ea:2e:25:f3:02:23:cb:2f:1a:89:a9:ab:fb:5b:54:
         49:7c:b4:2e:a9:69:9b:d7:ec:9f:d1:6c:09:0b:25:0d:46:ee:
         57:37:16:e2:3d:ee:a9:ba:8c:c0:40:53:ac:af:04:05:ba:df:
         4a:e5:aa:87:ef:95:17:d8:ff:36:d9:b8:30:c2:27:be:75:90:
         f0:81:5c:db:b5:8d:87:4e:e6:92:1e:e6:9d:b3:c2:af:95:47:
         95:57:1c:5a:7c:c6:8c:d4:be:6d:e6:9a:92:ba:30:76:c3:a6:
         0e:e5:35:29:f3:ae:55:a7:de:d0:be:63:95:3d:77:f6:68:4b:
         d8:56:28:3b:2a:37:cc:e0:69:82:01:b6:fa:fd:aa:35:9c:3c:
         f4:21:1e:44:74:53:e8:57:44:3d:3f:07:18:cf:d0:69:38:01:
         56:80:70:8c:11:1a:ca:b6:51:69:fc:16:ba:f1:bc:44:51:ea:
         ba:99:b4:cb:c6:9a:eb:f1:c6:6e:91:e3:23:cc:bf:43:47:ab:
         2a:28:de:ae:44:10:10:b9:b5:8b:be:27:11:fd:dd:40:67:17:
         51:b2:5e:7b:32:64:8c:45:22:c0:39:5f:b4:25:87:a9:4a:6c:
         ff:86:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:00 2024 by rpki-client on console-fra.rpki-client.org