Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8485996d-2d01-3c53-bca0-a6bbc2287b94.roa
File:                     8485996d-2d01-3c53-bca0-a6bbc2287b94.roa (raw, json)
Hash identifier:          lHMXFluiw6XXedzfDUlF6TCrQDJ17L2LP7LEfOEip58=
Subject key identifier:   33:DC:E6:7E:FB:18:5C:72:76:58:77:B2:95:22:6B:5D:C1:E2:58:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76CD76A2F1B1F0B56060C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8485996d-2d01-3c53-bca0-a6bbc2287b94.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     19720
IP address blocks:        216.2.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cd:76:a2:f1:b1:f0:b5:60:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=bcff11a9-d3c7-4c88-b62d-0e3e25b6f152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:42:f6:44:c8:70:5b:19:57:a9:6b:31:4a:
                    24:f2:ce:c7:7c:69:8f:20:71:ba:d8:7c:cb:8b:66:
                    2a:85:d4:fe:b1:51:85:49:72:3d:9a:1b:5f:4f:e1:
                    d1:25:4e:9b:99:73:71:14:fa:f9:13:4f:e7:81:77:
                    b8:10:7f:83:2d:f2:d6:d0:e1:4b:f8:d8:48:28:3d:
                    77:e4:8f:ee:10:a4:6e:00:9c:a9:ca:f2:b3:96:86:
                    57:ab:ca:e1:aa:ac:24:bf:4b:72:d1:24:0a:ae:b1:
                    36:2e:d1:b3:f7:45:55:14:c4:b1:22:5c:aa:dc:54:
                    49:17:bb:b1:a6:a0:f5:bf:e8:e0:5c:a8:93:18:70:
                    09:66:7a:39:a6:9a:06:6f:61:9c:73:90:1c:0c:8e:
                    2e:8e:d8:77:d3:0c:4f:b8:31:1a:eb:6c:29:a2:0e:
                    f0:00:9e:68:01:1f:55:fa:66:04:31:24:dc:35:cb:
                    14:ad:4a:17:9b:79:fc:05:fb:d3:9f:b4:20:47:65:
                    56:57:dc:41:70:32:c0:ae:a1:2c:b7:b5:0c:65:01:
                    93:a5:0b:84:a5:af:46:5a:07:2e:08:41:35:0c:5d:
                    7b:25:2d:65:76:13:c4:ac:2a:08:64:02:b5:8e:a5:
                    d0:81:54:6d:83:d6:2d:f5:a3:5d:3b:71:12:c5:30:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:E6:7E:FB:18:5C:72:76:58:77:B2:95:22:6B:5D:C1:E2:58:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8485996d-2d01-3c53-bca0-a6bbc2287b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:2b:dc:72:e4:f3:0a:10:34:06:5e:af:4d:d4:b6:7b:b8:
         ff:d1:9c:fa:2b:04:4e:78:65:dd:b2:9f:78:2e:e1:ae:6c:37:
         f8:fe:9a:ff:bd:0e:85:aa:85:4b:dd:9a:45:9b:dd:d1:13:b7:
         d6:7c:9c:1b:62:a1:9d:b9:c3:61:e4:8b:48:8f:5e:b6:00:4f:
         19:09:5e:e3:8c:64:2c:88:3d:20:cd:b1:a6:bb:37:44:c4:f7:
         ff:0d:48:02:aa:da:f9:92:44:14:c0:54:d9:1e:82:4e:e6:b5:
         d7:59:04:c8:8e:48:1a:f6:81:71:5f:76:7b:24:0f:9c:e1:b8:
         26:42:f3:d8:4b:5b:a4:6e:08:ed:9a:a3:dc:0d:36:23:14:54:
         2c:b7:89:a2:bf:c7:8e:d6:9e:a4:48:37:74:1d:d8:9f:88:e4:
         5f:26:4c:62:03:d3:b8:3d:df:8d:51:ca:e5:0b:18:80:e0:87:
         16:c9:e3:10:29:97:dc:5b:34:65:64:8b:0f:1b:a4:dc:36:4e:
         6e:af:90:42:ea:e1:02:c8:0c:16:8c:b6:e1:1a:33:13:07:2b:
         67:b9:be:e4:6e:73:7c:1d:0b:70:6b:d1:e4:4f:58:70:97:26:
         0c:90:4d:bc:d9:99:6f:32:8c:ed:57:d4:9c:71:04:28:da:c6:
         87:60:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:40 2024 by rpki-client on console-fra.rpki-client.org