Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
File:                     955a609a-42f8-316d-a938-27d1ede991ad.roa (raw, json)
Hash identifier:          gMMrk/AUr2xrcMJlSdMkgniAd9ADji3wuO/Gjo9z+RQ=
Subject key identifier:   88:56:15:CA:7C:BE:C2:55:6C:4A:AB:BF:73:66:50:BB:C3:66:3F:C2
Certificate issuer:       /CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Certificate serial:       010D0C9F4328584702857D3AB7DB3997DAE21A80
Authority key identifier: 31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
Signing time:             Tue 27 Aug 2024 01:00:31 +0000
ROA not before:           Tue 27 Aug 2024 01:00:31 +0000
ROA not after:            Mon 25 Nov 2024 02:00:31 +0000
asID:                     3477
IP address blocks:        192.94.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:02:85:7d:3a:b7:db:39:97:da:e2:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
        Validity
            Not Before: Aug 27 01:00:31 2024 GMT
            Not After : Nov 25 02:00:31 2024 GMT
        Subject: CN=472f4849-165d-4875-9683-b3eebeaec401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:c1:56:35:b3:eb:66:f2:61:1e:75:f9:88:
                    65:46:fb:28:f5:86:38:82:c4:b0:57:94:f2:c1:bf:
                    66:ed:2c:14:f8:f4:51:eb:92:dc:56:9b:02:d7:49:
                    24:a5:3c:c3:4e:53:22:2c:14:4b:65:ad:64:87:e3:
                    f8:f2:90:7a:0a:fc:db:49:67:32:ac:7b:2e:be:70:
                    9d:61:29:c9:51:84:db:49:66:51:65:f1:d4:01:2c:
                    0a:d7:af:7b:de:73:36:96:32:5a:e8:2d:2d:0f:50:
                    93:23:be:e9:72:52:54:da:89:73:c9:04:a4:b8:31:
                    6f:cd:22:18:ec:80:57:6b:c3:0f:12:80:20:de:cc:
                    85:8e:f1:87:40:ce:29:ae:16:eb:96:30:65:b2:40:
                    bf:78:6c:7d:31:5e:fa:06:f8:83:e1:a1:cf:17:15:
                    37:0d:a7:e3:83:29:70:92:02:2c:7d:7f:5b:ef:97:
                    86:26:85:4b:5c:e9:c8:60:31:5f:1d:5d:ce:89:4b:
                    c5:92:c6:56:f0:f1:af:f2:29:b9:97:d2:fd:1a:a2:
                    29:b2:d7:7e:fb:35:99:9d:ca:49:ec:3d:b3:15:27:
                    ac:4c:2b:be:4b:3c:8f:4f:f7:7d:de:21:26:18:9e:
                    d8:c4:a1:84:19:b7:d0:44:6f:a2:32:e2:0d:0c:d7:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:15:CA:7C:BE:C2:55:6C:4A:AB:BF:73:66:50:BB:C3:66:3F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl

            X509v3 Authority Key Identifier:
                keyid:31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:f5:73:42:97:6d:36:14:df:7b:da:37:e2:3e:1a:cb:07:
         2b:f2:29:71:ea:bc:e9:47:bc:bc:af:8e:55:ee:32:0e:80:37:
         9c:2b:33:0f:41:e8:7d:5c:42:e5:f8:78:68:53:85:02:f2:44:
         d2:bb:f8:48:3e:d2:0e:e3:65:b2:ae:82:98:bc:d0:d6:8a:44:
         e0:1f:35:28:5f:b6:f7:fe:88:08:0b:a3:c5:3c:6f:24:0c:a2:
         1d:f0:9f:b2:6a:13:77:fe:84:27:b0:9e:48:0d:b1:ce:1b:a1:
         77:93:29:82:71:02:65:c4:30:7a:40:27:7b:ec:91:ef:4a:a9:
         f2:95:41:23:fc:87:6c:e3:ad:d1:27:5d:08:79:28:47:c6:1c:
         76:bd:87:31:c6:6b:07:fe:86:30:35:54:26:4d:f5:81:d7:37:
         a3:a7:e4:57:9a:e3:0d:d4:19:ac:98:dc:36:93:b8:e7:8f:8e:
         a8:d1:b5:a8:00:1f:4e:4e:d1:13:b8:c1:86:45:5d:67:27:df:
         2e:ab:82:91:24:2e:a7:42:c5:b4:dd:9a:62:af:b2:86:29:c5:
         33:19:f1:00:6d:f0:8b:68:6f:06:f5:19:9f:ca:98:35:d6:32:
         96:fd:ef:e6:de:12:a5:b5:9a:17:ce:f5:be:f8:38:37:2e:50:
         da:38:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:03 2024 by rpki-client on console-fra.rpki-client.org