Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa
File:                     8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa (raw, json)
Hash identifier:          nkvwMEMSyEectLppd5m8UcceeisEcOPRwdo63rbge4w=
Subject key identifier:   13:C3:58:E7:2A:BA:99:5B:30:61:A7:6E:6D:96:5B:E2:4D:D9:E8:F5
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584797E137E0F120A3A37A4C9580
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        208.85.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:37:e0:f1:20:a3:a3:7a:4c:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=8bf06adf-538a-4e01-afda-ace76b845d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:7c:5a:66:59:4b:b2:bd:19:39:a9:5d:be:
                    52:07:f4:e6:69:c0:bb:db:d7:91:77:8c:2f:e7:74:
                    c2:83:d8:e1:85:f0:50:f9:5b:51:c5:32:78:16:ca:
                    9d:8c:94:d6:ff:cb:c8:71:09:3b:93:b6:b4:96:3d:
                    ad:66:8b:ce:8a:92:de:1f:39:cc:23:83:e5:2e:f2:
                    76:6e:fb:62:aa:bd:16:29:3d:68:1d:df:36:9e:ab:
                    b8:6e:98:3d:0c:5a:1c:93:fa:22:39:77:69:34:00:
                    e5:02:d8:6a:b8:4e:54:3a:9d:ca:f1:13:f3:a7:06:
                    e0:03:c9:7d:0d:2e:be:e8:8c:df:27:aa:db:d9:d7:
                    01:3d:3c:17:8c:4f:31:78:1f:f2:d4:20:6c:80:5e:
                    2a:58:24:10:5b:f1:3e:75:40:18:1a:09:a3:ed:09:
                    fc:3b:bd:5a:f6:66:08:4e:fa:7b:5c:92:62:ed:f9:
                    c3:26:35:58:2a:3d:7f:79:5c:34:8d:e5:b9:57:2f:
                    dc:5c:ab:98:c0:86:e3:88:11:aa:99:64:f4:8d:df:
                    ec:65:c9:10:cd:9a:28:c9:0a:3f:65:f1:4f:86:32:
                    0e:cd:d4:b8:fa:8e:8b:64:4a:cd:e4:27:a6:28:78:
                    41:62:89:04:ca:15:ae:84:80:40:38:05:c3:ad:50:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C3:58:E7:2A:BA:99:5B:30:61:A7:6E:6D:96:5B:E2:4D:D9:E8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:44:63:0e:3f:b2:b2:3d:64:1e:dd:b9:14:22:f1:e0:1c:
         2d:90:06:ca:bf:fe:5f:1f:ba:bc:5f:fa:16:2f:dc:3d:7b:a7:
         8e:2a:50:0f:ba:83:28:91:36:92:58:b7:63:d1:ca:82:e6:dd:
         f4:ec:1d:2f:44:d1:46:85:e9:2e:dc:03:a5:19:8d:01:dd:dc:
         d8:1b:ba:b5:5a:e8:5f:3e:2a:a6:0f:c0:38:bc:49:8f:d1:de:
         1c:7a:75:34:5b:d3:2b:e1:d8:4d:0e:28:d4:77:c8:0d:b4:5a:
         48:84:c4:69:ac:bb:ef:e9:f0:09:96:f3:99:df:18:7f:09:13:
         e1:a1:a2:b9:ff:08:ec:b1:8f:43:33:50:11:8d:aa:0d:72:2a:
         80:91:db:3c:43:74:1c:de:02:36:2c:27:98:8c:58:c7:7b:19:
         76:a1:a9:86:65:79:82:00:57:b6:78:07:9e:e9:9e:86:25:d4:
         42:da:41:d6:de:66:88:3f:2a:68:37:66:97:12:9a:03:84:52:
         3e:9f:91:a1:0c:9a:dd:f7:9a:65:96:77:68:01:b3:8d:de:df:
         8b:30:47:e5:ec:c7:24:04:94:33:56:39:ee:80:2b:e8:e2:91:
         f5:63:91:98:b1:d3:64:f5:61:91:10:dc:7a:d1:29:2f:e9:af:
         66:71:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org