Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa
File:                     861e816b-6efd-37cf-99b2-92f4d06fadbf.roa (raw, json)
Hash identifier:          8pEK7BaKl8NrinmKkLKvVHUp8pTm7Qh/hcTmpCUtk0A=
Subject key identifier:   E9:78:4E:C8:F1:96:74:D4:CE:E2:D7:08:7D:3B:4B:BE:BB:44:2F:C7
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285847D6CF4AB74B0A981301A3EA00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     13445
IP address blocks:        144.196.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:4a:b7:4b:0a:98:13:01:a3:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=3efb05a0-84e5-403e-92c9-c7a9c1e26f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:18:48:8b:3f:c1:a9:87:f2:9a:47:91:d9:
                    e6:22:e8:32:e6:bf:f0:d9:fc:f0:0b:79:47:24:ad:
                    a4:bd:a0:fe:ed:1e:4d:1c:f7:7b:4c:3f:96:a7:c0:
                    6f:a2:9b:3b:0d:24:b8:fa:c7:b9:7d:44:5d:8d:c8:
                    cd:a8:c0:eb:db:5a:fd:a1:c4:20:fe:1c:af:94:04:
                    45:b0:59:88:3a:f1:a2:46:99:5f:55:7c:e7:52:d7:
                    56:81:c1:d6:c6:d4:96:21:d8:27:3c:d7:89:be:f5:
                    2b:99:db:fb:f0:c4:0b:14:4f:4b:08:1f:6b:07:a9:
                    ee:63:34:e5:26:c7:b1:c6:6a:fb:bc:8c:87:c0:be:
                    dd:62:72:eb:6a:6c:05:54:6b:4c:4e:df:6c:9c:34:
                    f9:60:5d:b3:a2:12:e8:bc:08:66:dc:71:46:48:5b:
                    25:14:f4:62:27:71:88:5e:6b:e1:ad:30:85:56:48:
                    62:6a:d2:8e:23:43:af:93:b6:00:9c:11:08:d5:c1:
                    7a:fd:c9:5d:26:da:75:ef:5b:9a:26:c5:aa:bb:15:
                    63:7a:fb:68:0d:75:c3:e0:f5:ae:c2:f2:8b:53:6e:
                    12:74:c7:84:95:c4:6c:9c:3a:22:75:b0:0f:bf:63:
                    f8:00:33:33:9f:c8:f6:21:93:1b:37:ef:ea:3a:fb:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:4E:C8:F1:96:74:D4:CE:E2:D7:08:7D:3B:4B:BE:BB:44:2F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:07:27:8d:4a:e3:31:b4:d3:a8:b8:ef:c7:4c:a1:c6:58:6e:
         89:27:2f:a9:46:1d:63:0f:34:01:19:15:e7:c1:b4:3c:8b:b1:
         2f:ee:47:f2:0b:25:6c:bd:34:b8:c7:e2:e7:cb:1e:98:fc:64:
         08:32:66:28:ad:e6:fd:a5:f8:d3:99:b1:bd:f1:b0:f8:04:b0:
         66:75:73:89:bd:c6:85:43:15:bc:a5:06:b5:28:a4:54:84:d4:
         83:35:09:6a:8c:dc:3a:9d:a1:75:75:29:12:e7:fb:3f:c6:25:
         dc:48:c1:13:5b:72:3a:a4:d6:bf:1f:88:7e:dc:bf:88:89:8b:
         9b:13:76:96:3c:e7:6a:5a:5f:93:38:fd:5e:d6:75:57:39:92:
         6c:cc:a3:c2:ec:b3:0c:62:3e:02:d1:8a:bb:96:27:08:af:29:
         e0:35:f2:57:eb:57:dd:75:aa:10:15:d4:25:7e:3c:3c:4e:dc:
         1d:17:4a:2c:b1:57:8f:b2:90:53:53:c9:4f:b5:12:f0:48:1a:
         ca:8b:dd:3f:ef:05:c4:35:d9:4d:75:cc:40:5d:67:6e:2d:74:
         60:7c:4d:43:df:b2:b1:04:a6:2d:0c:e2:4d:e2:59:78:7d:86:
         59:ed:2e:cb:b6:9e:39:d1:7a:99:c2:7e:f5:90:5e:37:0a:3d:
         a6:57:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org