Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
File:                     5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa (raw, json)
Hash identifier:          aB9iJunXHxV89g8qSzwCFAVrPsLSIah5J6MqJDXu6pM=
Subject key identifier:   2F:F9:A2:2B:E0:16:70:EF:DD:29:95:B8:44:F2:5E:CC:58:5F:53:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847213B080F7D09ECC02E957D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     0
IP address blocks:        207.78.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:08:0f:7d:09:ec:c0:2e:95:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=377a42cc-1d3f-4a61-be21-4522bbd641a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:68:74:5f:1a:b3:bf:be:58:61:73:93:6b:
                    65:c3:ad:ee:b7:87:e3:c5:3f:b6:a4:4a:34:cc:2c:
                    02:d6:27:8f:a9:9b:e4:05:61:ce:bd:8f:49:8a:d7:
                    26:0e:b4:f2:a7:f2:55:31:f3:22:4d:35:f0:da:e2:
                    ae:52:43:c0:42:13:cf:1b:f3:4f:3c:be:eb:b0:67:
                    e9:48:f1:69:43:70:83:57:1c:0c:e8:f9:e2:d5:15:
                    9d:46:dc:37:20:84:36:a9:29:6e:d7:24:df:17:66:
                    fc:0f:ed:35:02:b5:26:ef:b6:5d:4a:e0:02:d3:4c:
                    8f:cd:6e:a6:26:b5:78:1d:5e:c0:c5:ff:e6:89:b5:
                    92:41:cc:c9:d0:2d:a4:71:66:29:16:52:a9:1c:5d:
                    7d:76:74:28:06:da:fb:67:a4:be:97:a2:07:1d:99:
                    0f:93:ce:7f:7c:76:95:cb:91:a0:ee:5f:79:3d:55:
                    d7:10:e2:68:7f:90:af:ad:d0:04:15:44:e6:78:dc:
                    0d:e6:ee:2b:cd:eb:2c:8c:ad:b7:8d:62:ff:4f:f8:
                    eb:51:68:ed:c2:44:76:f8:5b:e4:3b:88:08:92:94:
                    81:69:05:9d:7a:db:20:18:11:a7:54:da:32:21:01:
                    6d:96:c3:0d:00:ed:37:ad:5e:c5:4c:d5:50:e7:1d:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F9:A2:2B:E0:16:70:EF:DD:29:95:B8:44:F2:5E:CC:58:5F:53:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.78.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:67:11:de:b6:24:31:42:35:29:c8:f4:ef:59:f3:f9:14:
         d7:64:26:ab:18:ee:85:af:92:87:ca:db:fe:90:86:03:36:b7:
         b3:23:da:88:39:4b:3b:f4:c1:b3:7e:78:5c:8e:19:3b:27:8f:
         66:de:f0:ef:81:00:82:57:5a:f2:dd:4a:19:78:f0:20:c9:84:
         0a:da:85:0d:a3:8f:7f:6c:6f:a4:d7:d6:a7:fa:08:00:7d:1f:
         37:df:9c:5e:4b:fc:87:1d:75:ab:a1:c9:fb:9d:38:54:c5:c8:
         5a:7d:ae:43:b8:0d:6b:6e:48:7c:db:6f:3c:57:6e:d4:d7:ed:
         70:91:09:49:20:2b:65:e7:0c:71:95:fd:57:2e:b5:7b:23:13:
         51:09:31:9c:14:08:54:86:74:77:2f:2c:1d:87:0a:ba:91:e7:
         05:49:29:2e:04:4a:52:95:5a:22:fb:72:5f:74:86:d7:9f:5e:
         87:1e:1c:16:3e:f2:a6:34:f7:35:24:a6:06:b6:88:33:a7:42:
         95:57:30:b9:41:67:6b:8e:9b:86:66:81:c1:89:c4:9b:97:b4:
         f7:c5:c7:78:02:81:38:9e:81:ce:73:c5:75:44:e3:89:8d:e3:
         d0:52:a1:dd:c7:18:8c:7f:aa:b6:56:95:d0:6b:39:47:c5:1e:
         27:a9:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:26 2024 by rpki-client on console-ams.rpki-client.org