Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa
File:                     d601531d-2d62-3571-a279-c880f9690c92.roa (raw, json)
Hash identifier:          Vj8jA5ZRSZ/GzUgPxnAal9etnpZRm9byRRk45NvOg34=
Subject key identifier:   0D:CE:89:19:C0:10:F9:33:4E:8A:BA:D7:19:EB:87:FC:52:6C:50:8B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E70817FFD00A370AE8B8500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        172.217.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:81:7f:fd:00:a3:70:ae:8b:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=a098bc4a-fb5a-42b5-aa72-8af66a4f23c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:5f:ca:2e:c1:5b:a3:5d:a6:3d:fa:ab:54:
                    2f:85:eb:56:14:08:74:6c:5e:4c:63:88:7b:46:f1:
                    fe:bb:c4:99:87:22:bf:77:30:3a:f0:df:0e:eb:66:
                    eb:67:8d:e8:92:3b:fc:71:e9:2f:df:0e:97:11:ee:
                    3c:8f:4e:94:6c:fb:eb:6f:ee:e7:50:c3:ed:a5:69:
                    bb:e4:42:fe:cf:92:bf:8c:c6:1a:f6:41:32:37:c6:
                    67:a3:5d:1e:09:81:01:cb:3e:be:f2:4d:af:2f:40:
                    bc:cc:9d:56:a3:2d:4e:0d:f0:38:17:16:d0:26:88:
                    44:35:5d:6f:8e:d7:f0:7e:b7:44:1c:d8:02:08:fa:
                    ee:ea:21:5e:b0:c3:74:1d:08:c4:c5:4f:7f:52:b2:
                    89:0f:1c:67:a3:b1:12:f2:ff:11:4b:94:39:40:e8:
                    b9:a0:4a:88:dc:c9:f7:e7:b6:f7:24:7a:b1:58:51:
                    ca:ff:e3:51:73:15:1a:c3:c0:e4:22:29:93:40:a2:
                    7d:60:48:24:48:8f:88:64:1d:09:0e:65:3e:48:09:
                    2f:de:70:1c:a4:ae:95:cf:e0:e7:38:df:0e:c7:91:
                    26:0c:28:70:d2:f4:7e:ca:38:cd:59:f6:9b:7b:38:
                    07:d6:5e:6b:7a:f0:be:6c:37:96:fc:d0:d4:8f:ca:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:89:19:C0:10:F9:33:4E:8A:BA:D7:19:EB:87:FC:52:6C:50:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:71:62:ae:19:42:74:21:a6:fa:af:6c:a6:59:4c:eb:fa:
         4b:1b:57:6b:69:f4:84:06:50:90:50:d9:a2:2d:94:1a:a6:e2:
         94:b5:23:e0:37:ad:5a:ba:55:3b:07:90:22:55:e2:e3:a2:3e:
         b8:1c:9c:d1:e6:de:33:f8:c4:f6:b3:4f:a4:44:03:93:f4:41:
         7d:14:65:e3:0c:6b:cb:50:b5:88:cb:37:82:d8:d5:57:11:aa:
         d6:13:a5:fe:28:5a:d5:d4:11:a2:50:58:17:8f:ae:49:f8:86:
         ea:87:d8:ba:be:e1:b5:10:63:9a:39:2c:82:54:57:4c:63:8e:
         c7:46:10:6f:bd:f9:66:6f:ab:05:21:ac:de:4c:53:9c:5d:64:
         c4:2a:14:4f:70:94:c6:6f:14:eb:02:0e:0c:d2:c8:69:4a:c0:
         9d:05:b3:ee:8e:4f:3b:f7:be:55:eb:a0:5d:9e:2d:65:de:15:
         b7:95:5a:25:5e:9d:89:2f:e9:cd:69:6f:fc:c6:6b:f4:8c:14:
         9d:ba:d4:38:23:78:1f:54:26:17:f3:4c:74:fd:a9:db:b4:77:
         4f:ba:4b:16:fc:7d:70:cc:ea:20:c4:2d:a8:b0:e0:92:b0:46:
         51:bb:8b:df:32:80:19:fa:10:85:66:82:8b:6a:ba:8c:49:54:
         f1:4b:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:02 2024 by rpki-client on console-ams.rpki-client.org