Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/27b88359-c86f-3df8-aed7-353b654844ea.roa
File:                     27b88359-c86f-3df8-aed7-353b654844ea.roa (raw, json)
Hash identifier:          nvU2jsNOvKtLqxR2is1gjgKAq7Ia5PODmcXcRsO+pto=
Subject key identifier:   35:3D:4D:EF:9C:66:78:A4:D7:78:72:4E:C4:B5:88:B7:09:1F:16:CE
Certificate issuer:       /CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Certificate serial:       010D0C9F4328584789EBFAF93F79054C62CA9D80
Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/27b88359-c86f-3df8-aed7-353b654844ea.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     14618
IP address blocks:        192.230.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fa:f9:3f:79:05:4c:62:ca:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=c1e51118-918c-44cc-a317-2dc70b1c26c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:15:f9:39:1d:3e:f2:a1:f2:44:7c:e6:86:
                    31:72:73:37:9b:e2:bb:74:23:ef:96:bd:dd:0b:eb:
                    f6:4e:04:34:a4:4d:71:81:67:ad:86:32:27:16:4d:
                    4a:43:85:d3:ad:43:e0:83:38:c8:cf:44:9c:1c:d5:
                    ec:6b:7f:a9:d3:31:cb:e4:c0:b9:5f:05:52:9c:5f:
                    3b:c3:a5:cc:76:32:7b:df:cf:5e:82:60:a2:e5:4f:
                    b0:43:b5:29:1c:c7:44:68:a6:f6:87:9b:8d:f6:60:
                    8d:c7:b1:fd:77:95:89:ec:ae:d7:ce:2f:fe:ae:4f:
                    bf:a4:34:02:d7:cd:e3:b5:d7:df:93:90:88:36:9b:
                    45:70:36:62:1a:d3:7d:f8:12:9e:3a:f4:b1:1d:ec:
                    5a:9d:6b:56:dd:81:b5:28:77:30:63:0b:80:86:68:
                    3d:eb:56:5e:76:64:d9:86:79:6e:69:9d:25:32:33:
                    b7:ef:5e:ce:b1:2e:76:a3:e6:b8:92:93:3a:ca:aa:
                    e5:7a:c6:b1:dc:9c:d5:2f:1d:9f:9c:e0:d8:56:b2:
                    b2:83:25:00:a4:2a:86:cf:97:1f:24:1f:92:89:70:
                    9c:0f:8f:6f:8f:16:0f:c5:ee:f7:e2:ff:6c:4b:63:
                    1e:69:94:32:f3:28:67:ed:9f:98:53:3c:73:94:45:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:4D:EF:9C:66:78:A4:D7:78:72:4E:C4:B5:88:B7:09:1F:16:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/27b88359-c86f-3df8-aed7-353b654844ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl

            X509v3 Authority Key Identifier:
                keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:45:06:cf:f4:f3:2e:cf:ce:22:bf:c9:d2:29:75:70:89:34:
         6d:50:d2:f5:4b:93:e0:23:e6:a5:64:51:00:1f:6c:60:af:6f:
         5c:5e:ac:35:03:43:ec:9e:94:1e:fb:79:ef:d2:0d:c1:74:cf:
         84:02:4f:f0:7b:d4:47:de:c7:19:ef:cc:2a:9d:c9:ac:a5:56:
         74:59:65:cf:10:fb:24:84:6c:a1:5d:4d:ee:84:a5:17:b9:2c:
         4b:f8:7b:37:da:d0:1c:d9:20:ea:28:30:04:9b:10:a3:f7:8d:
         5a:48:20:c9:cb:01:3a:b6:32:38:84:39:4a:38:88:6e:0c:9f:
         48:3f:ca:1a:33:f0:cf:98:50:7b:9c:99:93:2d:26:27:88:3f:
         9e:f3:b8:52:e9:40:6d:8d:e1:07:b8:c8:b1:dc:fe:fb:99:8a:
         2b:39:9f:43:52:a2:85:22:3f:9b:06:75:c7:58:c0:a6:7e:ee:
         b4:95:e1:ee:e1:e0:28:db:91:61:99:90:51:0d:80:d7:72:22:
         be:9c:41:24:6b:91:0c:62:a7:30:41:1f:13:5e:76:3b:11:ef:
         75:6c:3a:78:88:bb:97:96:7b:9f:19:26:d0:46:8c:39:cc:f8:
         1e:cf:6b:64:e7:45:f4:93:01:af:ef:9a:39:2c:28:c6:f5:c1:
         b6:a8:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:05 2024 by rpki-client on console-fra.rpki-client.org