Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/58539ca3-d3fa-389a-bcda-4b68f7ff091c.roa
File:                     58539ca3-d3fa-389a-bcda-4b68f7ff091c.roa (raw, json)
Hash identifier:          eiyh6FU8Jce8U0xHU085Tj/OwdbzxCNQgfUUAXQzEME=
Subject key identifier:   A8:1A:44:0F:90:4D:48:1F:0D:65:13:8A:B7:F3:0B:6D:93:4C:DE:17
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584667B38612BFD6AA773D1FEC60
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/58539ca3-d3fa-389a-bcda-4b68f7ff091c.roa
Signing time:             Tue 02 Jul 2024 14:02:59 +0000
ROA not before:           Tue 02 Jul 2024 14:02:59 +0000
ROA not after:            Mon 30 Sep 2024 14:02:59 +0000
asID:                     203
IP address blocks:        67.215.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:67:b3:86:12:bf:d6:aa:77:3d:1f:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul  2 14:02:59 2024 GMT
            Not After : Sep 30 14:02:59 2024 GMT
        Subject: CN=dd58705f-6d0f-4f57-af80-6b1f1e802aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:c1:08:d4:41:95:c2:e2:b0:b7:b1:18:65:
                    dd:c3:de:24:8d:55:45:44:f7:6e:22:06:c4:c6:c1:
                    b4:47:03:9a:d5:4c:fc:c5:ad:c2:5a:7b:8e:81:6e:
                    c9:41:9c:82:30:c0:08:cf:98:f1:a8:86:0c:5b:9c:
                    0f:cb:ba:b4:17:78:dd:9b:d2:2f:c4:12:0b:a1:8e:
                    87:0f:aa:27:89:fb:5a:c5:0d:4e:e2:5c:b2:07:33:
                    6f:7d:80:a5:0f:eb:19:e5:88:80:ac:02:9f:da:0a:
                    9e:f0:20:10:76:a7:31:1e:86:3e:af:25:a9:09:b7:
                    99:76:5e:b2:ed:ce:a0:a4:57:6e:7a:54:71:a9:5e:
                    29:b4:d6:13:a1:9f:ce:c4:80:b9:53:d9:d7:18:62:
                    b0:27:57:b6:1b:8c:b3:9f:79:30:8f:29:6d:e8:30:
                    56:6d:80:08:0c:df:b8:0e:17:01:ef:ce:db:3a:08:
                    76:e7:4a:6a:60:0c:50:27:43:86:25:0b:b1:7d:e2:
                    9d:d1:f3:ba:2a:06:2d:6d:b5:93:19:a6:c4:a4:5e:
                    6d:ff:03:46:07:42:2e:79:22:ef:52:98:59:8f:d9:
                    d8:27:0e:c1:e2:7f:eb:3e:74:f2:74:b8:99:ed:90:
                    db:03:f6:6a:db:3a:03:a1:7c:37:40:cc:92:5f:d0:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:44:0F:90:4D:48:1F:0D:65:13:8A:B7:F3:0B:6D:93:4C:DE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/58539ca3-d3fa-389a-bcda-4b68f7ff091c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:d8:4e:da:8d:8f:04:e3:8b:0f:6d:41:a4:23:36:8f:69:
         43:d5:c9:e0:7c:96:05:df:bf:92:02:71:29:51:76:41:8f:f1:
         9d:81:97:5c:0b:e7:dd:fb:4c:45:da:ed:e7:53:a3:bb:bf:2b:
         a9:aa:c4:69:c5:4d:f9:fc:ca:e9:2c:f0:87:e3:6e:23:8a:8c:
         6a:50:57:dc:28:a4:5e:be:d2:d9:91:ca:72:73:f4:91:d5:2e:
         99:31:a2:9a:7f:5e:2d:9a:29:d0:3a:ed:98:1a:7c:15:90:7d:
         44:77:f5:59:ed:4f:b3:d4:7f:bf:ff:9e:32:bf:f9:ac:7a:0c:
         ad:c5:1a:2d:84:1c:ac:3d:9e:b7:bc:87:ee:45:d4:73:d7:d8:
         a1:8a:46:44:09:0d:d9:af:e5:40:67:a0:e5:66:56:35:e4:75:
         87:02:8c:28:f8:9d:47:8f:b3:2a:76:48:e0:bf:6f:08:0d:38:
         a0:e1:bc:4e:65:b0:4c:5a:c2:b5:2b:c4:63:d8:89:63:f3:fa:
         68:71:38:2e:8f:73:9c:8f:1f:74:fa:66:28:c2:5f:2e:08:b6:
         a1:15:79:62:a2:dc:1f:99:63:38:29:8a:e5:41:99:bb:1b:61:
         f0:97:22:13:f9:30:7b:ea:6c:99:9e:64:9f:4c:c1:a1:94:5b:
         d1:6d:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:39:53 2024 by rpki-client on console-ams.rpki-client.org