Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/613710bc-a079-3075-b18d-24384767dc3c.roa
File:                     613710bc-a079-3075-b18d-24384767dc3c.roa (raw, json)
Hash identifier:          5mAyAP0De162Fn1Y5tTQOz1zvEn80pE8rQWy03JU3Ac=
Subject key identifier:   89:1C:CB:56:51:05:DC:7A:52:E7:D7:5E:66:2C:3C:DC:09:A7:E6:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B89A5BA848064C719F700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/613710bc-a079-3075-b18d-24384767dc3c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.15.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:89:a5:ba:84:80:64:c7:19:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=e8793748-a9fe-4a76-be4b-77efd55129cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:48:a4:95:e4:41:2d:26:07:fd:33:10:e3:
                    7d:05:bf:3d:3f:0b:1d:ce:f1:45:f9:57:78:47:3b:
                    36:0c:dc:3b:e5:c8:87:a2:77:b5:ef:3e:51:2d:e2:
                    1b:f6:92:0b:78:1c:06:73:dd:a9:25:19:e9:c6:af:
                    e5:5d:49:72:f5:ce:02:55:ac:8d:d2:3b:3e:b6:29:
                    9c:48:0e:e6:ff:ca:17:ee:d4:d7:4c:6b:5b:f7:0a:
                    da:60:69:55:52:58:37:78:12:c0:93:3d:df:00:fe:
                    69:ea:63:ab:5f:2c:7c:c9:bd:60:59:f8:0b:2e:e8:
                    09:f8:ac:16:d6:6d:f2:c1:21:28:6a:12:c7:c3:a6:
                    c5:56:77:50:8e:bf:d4:8c:57:90:fd:67:d4:21:7e:
                    a4:ef:a6:95:2f:db:9b:53:58:1f:8d:89:d0:d3:ae:
                    29:a3:1a:b6:56:57:45:d8:a6:92:53:7c:9c:74:c0:
                    c2:7a:f1:a5:49:05:c1:60:06:2d:74:6d:b5:80:7a:
                    76:a0:98:ee:e8:71:9d:ab:84:01:6c:ca:98:51:83:
                    cd:dd:9c:76:4f:1e:87:6b:c1:2c:d1:7f:b1:c6:a4:
                    3a:1e:34:cd:09:be:03:16:e1:69:fe:21:61:68:3c:
                    3e:72:ea:5b:27:c8:47:37:4f:4a:4f:3f:fb:e4:9a:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:CB:56:51:05:DC:7A:52:E7:D7:5E:66:2C:3C:DC:09:A7:E6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/613710bc-a079-3075-b18d-24384767dc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.15.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:10:27:6b:7a:f7:0e:cc:0f:ad:51:84:50:27:52:49:f3:
         e3:04:1d:55:fa:f3:79:8c:85:2a:e9:0e:d3:f9:be:cb:01:62:
         52:de:50:f2:0e:1e:91:fc:35:2e:13:31:fe:d9:7b:f4:55:88:
         dd:d2:d0:ff:b4:7e:6f:ab:24:ed:d6:7e:bd:48:ad:45:0f:1e:
         42:87:5f:be:07:dc:4b:26:31:6c:0e:f4:c3:7c:f8:56:c1:41:
         57:75:16:c0:a9:f9:af:3e:a6:33:ab:d3:b0:9c:11:51:5b:af:
         0d:be:d2:17:a5:7e:fe:97:9b:d5:ac:70:02:bf:a5:27:7e:64:
         26:ac:7c:1b:b3:43:75:ca:b2:4c:3f:fc:48:08:92:57:3f:d3:
         e2:36:65:6c:e2:55:27:68:62:a6:bf:1b:71:97:3d:5f:4b:74:
         91:4d:2d:8d:14:f7:35:52:58:9d:a2:f9:68:59:19:3b:88:29:
         08:23:0a:88:55:a1:6f:2c:1c:5a:e6:b2:2e:d3:e3:d6:32:a4:
         59:72:fe:44:1c:cb:23:c4:eb:77:ce:3b:82:af:e6:17:39:39:
         46:cd:a8:10:70:f5:54:02:02:8b:af:60:b7:fa:c7:a8:ed:13:
         67:42:b4:ce:ef:64:f6:9e:2d:e0:86:1e:69:94:41:84:36:64:
         5e:d4:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:33 2024 by rpki-client on console-fra.rpki-client.org