Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
File:                     350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json)
Hash identifier:          XJTqlWWtyu6i3EgJUTRGO5XN+BmxrKXuHYfU3R0iQDw=
Subject key identifier:   4B:3C:52:5B:86:43:A2:4E:74:65:62:B5:1F:6A:0E:F1:44:76:74:C5
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F432858473095E4B4C31A4FF7AF7A1580
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     6639
IP address blocks:        208.157.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e4:b4:c3:1a:4f:f7:af:7a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=a65a684e-9635-46d0-b17a-3cf540259461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:62:4d:d3:69:ed:75:b4:47:d1:57:e9:47:
                    57:3e:4b:10:51:38:be:b2:9a:70:4a:be:d6:77:7c:
                    09:d5:4a:fa:d8:b6:c5:13:22:c1:ee:c9:bd:9a:48:
                    6e:43:c1:38:dc:94:e2:f7:d2:7f:47:8b:c5:c2:4b:
                    a4:d0:1b:97:41:71:ec:04:4c:3f:fd:ad:fc:1d:f3:
                    be:d6:d4:70:e5:92:5c:62:07:39:92:06:00:91:5c:
                    c9:48:13:fe:0c:9e:da:66:f4:0c:ed:c1:cc:1d:df:
                    a3:24:b3:98:a8:8e:7a:94:ca:b8:37:28:cb:ae:4c:
                    f5:1c:1d:23:38:57:e9:f1:3b:9c:1c:73:50:0a:d2:
                    c3:ad:3c:00:7d:b2:70:2d:3f:25:82:40:df:2d:cf:
                    5e:8a:2e:75:43:e3:f0:30:b4:03:9a:55:7c:23:4e:
                    7d:5a:6a:65:20:96:3a:8b:79:b2:f8:64:ce:fa:1a:
                    d7:c2:b2:48:4c:7a:1c:d4:b2:60:31:14:fb:bf:61:
                    f6:4d:05:a0:de:dd:c3:36:ed:1a:5f:bc:f2:e9:47:
                    c4:c5:55:67:9c:02:fe:8e:a4:23:16:16:ab:74:54:
                    58:7f:44:13:f7:4c:ed:14:af:24:3f:1f:cc:09:27:
                    e8:21:61:d9:b0:18:9f:df:f4:a6:78:27:28:89:40:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:52:5B:86:43:A2:4E:74:65:62:B5:1F:6A:0E:F1:44:76:74:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.157.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:04:eb:89:ee:38:8e:e5:6e:0d:8b:c5:8b:84:ed:3b:53:
         f7:4b:ba:78:0d:d2:c7:77:20:cf:5c:b3:81:0b:6c:eb:f2:0b:
         35:fc:d7:9a:33:3d:61:2e:3b:8d:7d:35:98:f8:cd:fa:61:0f:
         ab:fa:15:a1:29:66:d9:a5:78:e0:fc:80:99:6d:45:10:ed:59:
         c3:ca:fb:4d:10:8e:82:d0:60:be:a8:6e:7b:bf:bf:f9:a2:2a:
         f2:01:58:ee:e2:bc:fe:3c:c4:7a:58:bb:a1:98:68:46:c5:1a:
         9c:b3:39:1c:86:e0:13:30:86:03:75:fe:f8:ec:2a:9c:a4:a2:
         5c:7d:cc:f2:00:d1:81:b6:26:01:e5:f5:6f:aa:a0:a2:d0:91:
         7d:32:b4:ad:22:87:a7:ba:ab:c4:c0:9d:f5:43:73:24:bc:f1:
         c8:c8:0a:66:a0:4d:b4:e7:2a:aa:92:2d:9d:f0:d8:27:75:db:
         71:08:c4:13:5d:e1:87:2f:7c:87:a2:9e:6d:c8:72:12:0e:70:
         a2:c8:8d:69:e8:f0:98:cd:4f:ba:37:4f:b0:25:09:9a:60:21:
         92:fb:5a:c6:47:68:88:b2:7b:81:4a:6f:c4:dd:8a:e7:b2:a7:
         8d:e5:e8:64:cc:a8:98:23:e5:53:a7:30:55:a3:71:65:06:b8:
         d5:4a:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org