Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa
File:                     12875a52-35c3-3708-ba26-fcd580857baa.roa (raw, json)
Hash identifier:          Vy5R4ZGBQunH0F7qj9dNSSDNDiu8TvZQ0/lz3c4C2h8=
Subject key identifier:   BD:C3:87:D7:E1:9E:32:A4:62:44:03:B7:80:2B:5C:5E:13:E5:2B:B1
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584797E13E247B0E9128CDA425C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        208.85.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3e:24:7b:0e:91:28:cd:a4:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=4d2c87c8-cb8c-4b11-bf54-1d6a6191da50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:9c:cb:34:88:26:b2:be:99:20:94:da:1b:
                    0b:b2:77:34:fc:18:f9:03:e6:f8:40:b8:68:7d:a9:
                    de:42:31:17:be:59:bf:05:bd:83:c5:97:1e:1e:3a:
                    85:9e:98:b5:4a:61:e0:10:08:d9:3c:61:85:ef:62:
                    67:8e:37:0e:16:7b:38:52:ff:ed:d3:e5:64:8b:73:
                    fc:40:19:83:7e:0a:31:af:d6:a3:9c:ef:fe:22:84:
                    59:11:d8:be:e9:b7:ef:3e:e3:10:df:38:47:f7:08:
                    10:7b:44:b1:3b:3b:8b:dc:bb:14:29:81:2b:2e:ee:
                    c8:d6:b4:bf:41:f1:8e:3a:83:ff:4d:0e:29:f8:5b:
                    27:96:57:90:1f:41:dc:fb:0d:56:06:73:80:7c:51:
                    6d:fd:b2:5a:f4:12:ed:0e:42:68:44:45:2a:3b:01:
                    cf:56:b5:7a:25:92:c3:b5:bf:e8:3f:8f:11:98:27:
                    1e:9c:9d:2b:b6:ab:fa:5c:68:af:a8:c8:00:9f:55:
                    90:13:a0:be:7b:94:fb:63:a6:63:66:00:44:03:4c:
                    b5:58:4e:f1:e7:f5:18:8a:f4:fd:95:fd:fc:96:13:
                    ed:3f:b2:67:77:bc:90:35:7b:fa:cf:41:a9:94:06:
                    e1:c5:19:f1:0b:f2:9e:20:dc:6b:54:f4:d5:59:d8:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:87:D7:E1:9E:32:A4:62:44:03:B7:80:2B:5C:5E:13:E5:2B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:22:35:72:a2:58:86:a3:5f:a9:5f:6b:a5:64:28:30:29:
         16:f3:12:76:87:6d:29:95:1b:f1:6c:ee:77:66:a5:ce:83:25:
         3b:91:cc:53:cd:9e:49:35:20:96:7a:a7:7e:78:53:a3:5f:af:
         f5:20:04:1e:93:47:69:c5:ec:18:c6:5d:0c:22:fd:bc:37:c2:
         43:4c:dd:fa:21:fc:a1:76:1b:ee:70:89:1a:65:04:14:99:5b:
         1b:e7:8d:6c:65:0c:9d:3f:ad:25:0b:15:7f:42:82:4b:8a:57:
         b1:bd:f6:25:6b:c2:b7:46:1c:13:a4:7b:df:3a:93:eb:a4:6a:
         8a:7b:fe:98:8c:da:e4:c3:db:11:0b:5b:3a:9e:59:1e:9b:3b:
         6c:a9:ed:52:ef:87:9c:e9:00:ff:bb:d4:0a:78:28:3b:24:04:
         56:57:f8:20:cd:fc:41:c4:ed:7d:4c:bf:d8:2c:4f:59:0e:7a:
         f8:6f:51:2e:96:0a:0f:e4:02:83:fb:3f:b2:78:a6:95:82:3b:
         6e:b2:83:76:4b:34:17:c3:52:01:a5:e2:b7:86:fb:3c:d5:ff:
         d9:09:e3:2b:a7:97:bd:29:05:53:21:84:1d:d4:d0:99:a7:d0:
         31:28:a3:35:36:ec:1d:0a:38:c9:bd:83:3e:9b:3b:97:7c:f5:
         f3:19:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org