Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa
File:                     d7988856-9a82-35e4-8647-e7dca63b7c9b.roa (raw, json)
Hash identifier:          mvhhsstJnHjZ0FWX+WQZ0acdjKGxPMwlkZB1QgFvEXs=
Subject key identifier:   81:80:70:B5:34:84:32:65:92:1E:5A:10:FA:59:4C:57:80:19:7B:D3
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847B696BB3ED4EF69D5D6E5D960
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        207.54.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bb:3e:d4:ef:69:d5:d6:e5:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=5956c80f-f4b5-4a40-857c-351bbe8ff959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:78:1a:2f:3e:ce:59:6c:42:37:52:67:ba:
                    1c:e0:1b:27:d8:89:40:e5:68:c0:0e:77:2a:b7:e4:
                    ab:9a:92:ca:90:05:d1:09:2d:84:4f:5a:3a:e1:f8:
                    9d:86:9e:c2:3e:d7:b5:1e:ae:a9:06:3b:18:5c:5d:
                    09:54:3b:83:e9:01:d5:9c:39:e4:33:b1:84:3f:d4:
                    97:5f:d8:8a:6e:7c:7f:46:d1:ab:29:b3:c7:7f:16:
                    3e:4f:ea:7c:68:63:1c:2a:5b:c7:27:e8:b9:17:e3:
                    91:7f:4e:77:e1:6b:34:b4:7b:cd:08:d7:b8:3b:b2:
                    16:69:05:26:75:6c:fa:7b:0b:a1:a0:50:c5:89:d6:
                    54:a3:9e:98:d2:07:cf:47:10:7d:d7:bf:d9:cc:25:
                    25:b9:00:69:41:31:54:04:3c:f1:8b:df:2c:3d:71:
                    84:83:c7:f0:e2:08:27:61:3e:fe:eb:54:f7:32:20:
                    d0:db:60:c9:c5:2d:78:d3:20:85:63:6a:90:86:eb:
                    81:31:0d:73:8b:5f:c5:71:e0:75:14:11:a8:86:33:
                    04:0d:22:de:45:75:fa:4d:42:89:13:63:b1:ce:ad:
                    a7:a1:a2:e4:c8:3b:76:7a:fd:9c:4a:99:ca:8a:fe:
                    6e:d1:dc:ae:ec:57:af:48:14:75:9c:c1:18:31:ad:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:80:70:B5:34:84:32:65:92:1E:5A:10:FA:59:4C:57:80:19:7B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:34:90:f7:51:09:8d:46:90:9c:05:e7:db:17:98:8a:15:
         ce:3f:1c:09:fa:7b:cf:89:e6:22:c9:72:bd:b2:49:28:99:50:
         cb:1a:28:72:22:93:12:c3:f6:31:28:3b:0a:b2:54:b4:4b:db:
         c2:5f:b9:1d:21:1e:16:18:36:38:95:ec:a3:77:f2:b0:80:5e:
         c1:d3:af:5b:f2:7c:b4:20:42:a7:38:5d:05:a6:34:82:f8:6f:
         ee:22:9f:d5:bf:8f:b8:e6:80:f9:ce:ed:2e:9a:88:c6:67:e0:
         2e:d9:f7:93:14:f4:3b:3d:b1:ff:74:10:33:a6:c3:cc:75:a5:
         85:0e:2c:a2:1d:19:74:86:cd:2c:36:20:8d:9f:d4:4d:de:91:
         39:22:7a:33:39:81:5f:b1:05:b3:42:7a:95:0e:ce:99:0d:fd:
         2c:4d:50:36:6a:a0:36:48:ae:10:ff:38:94:89:75:00:54:04:
         25:66:81:0a:25:c2:d4:69:a6:73:41:34:67:d9:ad:03:27:25:
         6b:aa:3f:6e:22:3c:da:f3:44:5a:8e:42:af:07:bf:5d:f5:ba:
         fb:df:78:6f:d9:3f:bb:61:e6:b3:47:66:1f:42:f5:c0:4d:00:
         34:11:f5:f1:88:24:3b:62:f1:85:36:ee:52:66:bb:b6:d2:9b:
         8c:b9:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:24:46 2024 by rpki-client on console-fra.rpki-client.org