Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa
File:                     67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json)
Hash identifier:          yUXPZimGK5iap7pwYk8Vf9rcWvHZAp/Bj5XTb+3fafg=
Subject key identifier:   F9:52:88:1F:37:C9:E5:5B:35:F2:E4:CF:E2:E1:7D:A9:FE:31:62:A3
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858479AABE7761184FE55F3C90A80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        208.85.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e7:76:11:84:fe:55:f3:c9:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=86a1591f-f704-4830-b8b6-bc8af7f16650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:fb:8e:b9:fe:a3:4a:c5:c3:6f:ec:67:81:
                    91:6a:e1:03:7c:aa:bc:95:26:44:27:76:0b:3c:42:
                    a8:31:c4:23:71:52:26:94:17:d4:db:f3:e7:6d:81:
                    d2:81:5b:f0:0d:b9:50:76:82:c8:f7:dd:05:0e:29:
                    e8:97:98:96:5b:66:6a:87:a7:f6:6b:23:71:1b:3d:
                    89:4b:f2:d8:ce:d7:76:93:e4:94:b7:e9:9d:93:30:
                    75:a6:a8:cc:65:af:df:6a:b5:f1:8b:3f:8e:de:72:
                    63:63:a8:03:bf:61:02:4d:07:95:db:29:3f:80:bf:
                    49:2c:40:7e:03:90:b9:80:e6:90:4c:cc:6c:7a:59:
                    a9:fa:c8:b9:53:63:22:05:cc:87:3b:06:18:f7:79:
                    1c:c4:2c:cf:8b:da:ab:c5:db:57:28:49:65:29:b5:
                    a2:e0:d1:06:6f:9d:a1:cb:0a:31:64:7e:c9:da:e5:
                    f4:16:24:ee:51:8f:89:dd:86:31:e1:86:ce:d4:20:
                    f2:3c:81:e5:7b:89:3d:c9:f5:b9:31:fa:31:f0:4b:
                    ee:a3:09:82:de:a3:6b:ac:67:61:31:e7:2f:00:a6:
                    40:7f:56:c2:eb:30:c7:89:a5:25:3d:b3:95:5a:86:
                    5a:0f:83:51:71:78:db:c5:3e:23:6f:8f:a7:a8:9d:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:88:1F:37:C9:E5:5B:35:F2:E4:CF:E2:E1:7D:A9:FE:31:62:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:ef:24:4b:98:0d:03:0f:48:bd:2c:c8:40:c6:c4:f2:5e:
         4b:2e:ee:77:73:6a:79:53:d3:5e:37:03:d2:5e:53:ff:9a:f9:
         6d:d2:85:fc:3e:a8:1f:eb:a6:64:ff:c3:2a:aa:66:91:28:25:
         d1:c9:4e:f9:b9:fb:e0:08:c5:41:be:12:85:0f:ac:9a:7a:75:
         25:4b:e3:a0:67:f1:79:77:b4:63:0d:16:80:79:61:17:fa:f7:
         6a:4a:63:d0:ee:08:ed:94:87:07:6e:2d:4d:78:b0:d3:8e:bd:
         4a:9b:57:8d:ac:42:90:e5:c1:08:3f:b4:58:20:41:73:9e:c8:
         cc:73:4b:1f:75:17:ac:27:b2:cb:f2:76:b9:97:d6:55:0c:ba:
         e8:ae:d7:5b:17:ac:77:9e:da:e6:c1:79:d5:c3:a8:1c:1a:d3:
         20:1f:5c:a5:99:79:aa:40:18:40:3f:1e:7c:e7:cd:e3:26:3e:
         75:c4:e4:2e:79:90:30:21:dc:17:13:c7:34:87:7d:37:45:2a:
         1b:04:08:c9:41:d6:4f:f0:1f:7d:ac:fe:1b:b6:59:a4:7b:11:
         a9:3d:2c:c7:f8:ad:20:f2:6c:45:24:9b:a9:d4:66:f6:52:b0:
         fa:a0:90:e3:dd:c3:10:9d:73:11:12:4a:21:0c:88:ea:ff:f9:
         21:9f:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:27 2024 by rpki-client on console-fra.rpki-client.org