Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ff869eb-e6da-3fee-80e8-a9b89d0229ce.roa
File:                     9ff869eb-e6da-3fee-80e8-a9b89d0229ce.roa (raw, json)
Hash identifier:          mOnDnFcpbG5OyITipkmVwzeZQyHFr21dShteax4BYXQ=
Subject key identifier:   5E:2A:73:0F:87:1C:1E:DB:55:7A:CF:3F:1B:A7:82:FA:4D:C9:2D:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C08CE68513F482025900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ff869eb-e6da-3fee-80e8-a9b89d0229ce.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     14717
IP address blocks:        208.235.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c0:8c:e6:85:13:f4:82:02:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=bb40b258-b920-4774-a9a0-eb09057e52e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:da:64:aa:b0:1b:cd:a9:a1:3f:e3:c3:67:6d:
                    fd:3e:63:92:7f:df:b0:7a:54:21:11:ce:35:19:66:
                    d5:af:4b:cb:4b:41:bc:89:9d:3c:ae:23:1a:f9:cb:
                    a1:c1:28:09:88:6d:8b:90:cf:74:af:22:c0:19:95:
                    38:90:46:ca:37:9f:79:dc:93:21:b6:b3:97:07:67:
                    bb:f9:96:53:22:c5:f1:f3:a6:ba:eb:fa:2f:7d:a9:
                    ea:9a:7f:ed:f4:47:b8:e3:54:93:27:1f:a2:93:8f:
                    fb:ef:cd:b6:35:10:67:b8:00:db:c6:b9:5f:39:91:
                    97:09:5b:cc:38:dd:82:76:0e:35:39:ff:6b:e2:45:
                    3e:85:c7:d2:e6:ae:e8:52:8d:ac:31:7d:57:cd:ff:
                    c6:46:f7:cf:25:21:af:5d:4d:44:5b:fd:7d:74:f3:
                    f7:61:a1:e4:84:36:b6:30:b3:f5:27:d8:99:d8:b3:
                    ec:9a:ac:95:c8:56:ff:03:bd:e7:01:21:b4:6e:9c:
                    35:41:be:ac:9c:13:fc:8f:11:d9:53:11:63:82:23:
                    90:0a:3e:73:3e:9d:ad:50:57:5d:97:72:e4:14:5f:
                    3f:e8:b6:a1:8a:50:f6:2f:1f:be:9c:f0:13:7e:d4:
                    fe:4e:0c:b9:54:b1:dd:f6:13:6f:2a:5a:bc:2f:31:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2A:73:0F:87:1C:1E:DB:55:7A:CF:3F:1B:A7:82:FA:4D:C9:2D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ff869eb-e6da-3fee-80e8-a9b89d0229ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.235.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:b5:f9:0a:ee:ec:74:21:f7:73:e6:f0:07:ee:61:9b:97:
         66:ae:e0:80:6f:63:55:38:96:ec:8d:8f:db:d3:83:d3:03:c1:
         ef:b5:44:d9:0a:0f:39:65:e0:38:71:a7:af:fa:ad:16:0f:e8:
         40:6e:1a:57:ba:1a:99:d9:8a:5c:27:a5:65:42:63:0c:d7:1a:
         97:59:25:cf:8b:73:f9:fa:98:d7:c6:de:09:13:4e:2c:f0:24:
         d7:81:1e:f1:db:2d:5c:ea:19:52:3f:ed:07:4a:08:d9:fa:fb:
         58:30:bc:78:a9:a0:9a:02:4c:47:03:01:93:aa:be:37:17:d6:
         65:38:72:1a:63:af:79:50:fc:15:88:0f:28:33:a0:82:1a:03:
         5d:9c:3b:e8:92:cc:d3:15:ac:4c:ab:57:3c:0e:bd:72:18:cd:
         fe:59:89:c6:ae:28:aa:3c:8a:01:30:49:03:07:63:43:7a:1f:
         c8:43:04:d5:a3:c6:39:23:4c:41:36:c8:a5:f1:80:be:ba:2c:
         83:57:12:c0:3c:cc:7f:15:b3:da:4a:7d:3c:d5:bc:e9:93:67:
         d4:67:af:11:a0:3c:36:9a:ec:96:35:7a:9c:d0:1d:1b:bc:e3:
         41:9f:30:b5:5b:28:00:12:77:35:da:4e:5d:8d:0d:5f:bb:e8:
         26:2e:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org