Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
File:                     d56235c3-7112-36eb-91e7-941956b41963.roa (raw, json)
Hash identifier:          c3ZrMnKufDirYhXT5OKe8exMMp4vNSfQ8it5QkoqpZU=
Subject key identifier:   D5:22:34:AC:B1:20:0C:96:9E:E6:4A:30:EC:9C:6E:59:F6:B0:78:D8
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F432858472C65DCE5F7F4DEB216119D00
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     19905
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:dc:e5:f7:f4:de:b2:16:11:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=798142b9-3ed0-4fa8-a8e2-de7605712d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:6c:18:c8:ca:dd:fb:04:48:7c:0c:aa:f9:
                    59:aa:b8:b0:0c:49:fe:a2:02:10:9d:20:f9:41:16:
                    f7:ea:6c:4f:5f:cb:2a:31:bc:42:33:5f:2a:5e:a0:
                    5e:8e:ce:d7:7e:63:50:70:50:f2:23:56:b4:5b:f7:
                    37:5f:12:b6:82:a7:cf:63:11:92:ce:3d:2b:9f:c1:
                    7b:90:72:28:a5:d7:d7:f7:ed:d2:50:0b:1e:66:3e:
                    dd:6a:6a:f9:0d:51:c8:28:44:5c:a5:56:21:00:be:
                    0e:30:5e:fb:23:72:55:6d:5c:78:d1:3a:48:f8:96:
                    c0:ed:0e:14:69:f9:20:ce:5e:e1:d0:d8:3b:36:5b:
                    ed:4b:48:68:c7:e3:6a:73:92:ad:ca:bd:5f:a5:57:
                    29:be:3e:73:9e:28:58:67:46:a6:64:f0:17:6e:a2:
                    e9:60:c5:0e:8f:0f:32:07:35:2e:f9:26:3b:e9:ca:
                    51:60:7c:46:07:8b:d7:5b:d1:e5:4b:d6:74:1b:4f:
                    67:1e:6a:3e:54:c9:11:d6:09:73:57:fb:c5:0e:cc:
                    8a:b0:b7:44:c6:57:3c:5e:42:9d:8c:3c:42:69:ab:
                    65:db:31:7d:41:b3:e8:27:a2:a4:cd:ad:e1:ff:8f:
                    05:89:e4:fd:67:a2:5b:8b:24:1c:f4:11:ca:9f:91:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:34:AC:B1:20:0C:96:9E:E6:4A:30:EC:9C:6E:59:F6:B0:78:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:69:af:60:9e:82:43:67:9a:57:8c:f3:06:aa:3b:c4:bd:
         a1:ce:46:6a:8a:1f:ba:00:1a:bf:6b:99:53:6e:0b:12:63:21:
         a3:ed:51:3f:b7:6b:7a:39:d9:dd:0a:46:a6:18:fb:13:35:a0:
         8b:ef:d1:e1:6e:61:bc:e1:c0:33:b2:7d:96:96:01:02:dd:a8:
         5c:a4:a9:dd:21:38:70:4c:7c:f2:c2:5d:ca:90:ac:43:01:22:
         07:27:b0:f4:ea:27:9e:95:6a:18:e3:2f:3b:55:7a:bd:50:c7:
         c4:98:e3:8d:37:2f:c9:2b:ea:f6:4f:15:ca:c7:60:c6:b8:76:
         f1:9f:c0:c1:95:ec:49:6c:a2:b1:e7:b4:c1:4f:78:b1:a6:02:
         83:2e:c9:09:5b:06:a1:b5:3c:e3:90:26:12:1c:8d:d3:70:70:
         96:91:c9:2c:31:a1:2a:f8:ff:e3:27:fc:e8:04:d0:1a:0d:50:
         e8:5b:2b:55:14:54:a8:81:7f:c7:2e:5b:ac:6c:fe:05:ee:8a:
         7a:64:f0:5a:be:d9:f8:ae:ec:28:22:08:88:00:bf:cc:ce:84:
         3f:48:c2:0e:e0:7f:fb:35:84:c6:8f:15:eb:1d:db:a1:7b:d1:
         ea:de:6f:8e:fc:38:d5:b4:2c:0a:f1:9c:28:54:23:d2:f6:14:
         77:15:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:28 2024 by rpki-client on console-fra.rpki-client.org