Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa
File:                     b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa (raw, json)
Hash identifier:          eEszhB9dDu3+5sJdy1dfzY2LeepYXy6xTqCDbwiza9E=
Subject key identifier:   D1:35:66:E8:B8:89:96:3B:B6:D4:B6:B7:4C:9E:C7:4D:4E:03:CF:9A
Certificate issuer:       /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial:       010D0C9F43285847161056A4C8389948999EB5C0
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     1798
IP address blocks:        198.232.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:56:a4:c8:38:99:48:99:9e:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=129925f2-8679-4bed-a77a-4d3a9cff7426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:c2:8b:73:ef:13:f2:60:41:09:97:61:3c:
                    60:56:74:8e:8e:09:03:34:c5:ad:14:60:14:ee:c7:
                    85:1e:bb:d2:56:29:b0:de:ff:15:7b:55:c2:cb:55:
                    bd:c3:5f:0b:d1:c1:5b:a7:0e:cd:04:be:dd:93:cc:
                    34:d5:46:e2:fb:07:9c:64:29:24:b4:47:b6:8a:a2:
                    74:93:b9:b8:5a:f1:49:82:8e:e1:40:07:55:30:75:
                    38:2e:df:fb:83:3c:a7:ad:4d:2a:2c:e8:9c:7b:7f:
                    03:59:72:a0:a0:f4:28:49:ed:e9:fe:34:9a:64:07:
                    cf:3e:7e:00:cb:ca:49:ac:da:4e:05:83:3d:33:5f:
                    14:01:0f:f4:7a:ee:7a:98:98:ad:ad:e4:dd:d1:ac:
                    7d:c6:d9:b6:c6:65:ad:e4:e5:00:7c:95:a2:e2:48:
                    43:5c:19:2e:d2:17:a7:5c:92:19:0b:ed:44:67:2e:
                    22:34:80:d1:91:a0:3e:cb:a7:43:6e:22:80:9c:57:
                    3d:c4:d2:b7:28:5d:49:68:f3:eb:b1:fe:da:77:83:
                    d2:fd:43:7c:c2:df:4b:67:ec:ff:4e:96:93:f9:dc:
                    8e:68:8d:0f:5b:29:fb:bc:1c:52:99:06:13:9e:3e:
                    cb:1c:c8:9c:10:e5:15:52:72:c3:74:16:64:34:d4:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:66:E8:B8:89:96:3B:B6:D4:B6:B7:4C:9E:C7:4D:4E:03:CF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:46:10:ee:45:9f:b1:8d:43:20:b2:bb:cf:b5:dd:24:52:ab:
         08:48:af:f6:56:f1:e7:37:d1:85:89:39:56:36:5c:fb:94:a5:
         98:85:e5:b9:77:12:a2:3d:13:4f:22:81:9a:dc:0e:fd:72:38:
         a7:c5:82:d6:22:08:5f:7c:41:d0:8b:84:b7:e9:05:5a:2e:2f:
         9f:4c:55:65:f4:26:c2:f8:84:8a:84:95:e9:5c:c9:67:2d:0e:
         09:3b:51:2e:d5:33:ad:c3:27:96:c7:69:e7:f8:f8:e5:a3:6b:
         22:5f:ca:63:73:7e:77:4e:e5:55:b1:da:e3:3f:e0:1a:f9:73:
         ac:2b:20:65:44:b4:08:0e:fe:0f:67:97:43:99:3a:fe:2a:06:
         d1:9e:e5:f4:6a:68:6b:eb:d8:4b:69:1e:c1:1c:9a:64:86:b6:
         08:78:6a:17:e1:db:75:b9:96:61:84:e1:80:fa:bb:b1:93:6c:
         8a:9c:54:66:1c:17:c6:85:6e:84:82:15:da:82:a9:60:31:e1:
         70:85:5c:95:11:c0:1a:e7:44:82:44:ab:b2:dd:cc:f8:f1:fb:
         82:37:93:14:57:cd:46:24:d6:f5:0d:1c:5f:fb:30:bf:54:96:
         99:cc:2a:d2:ed:7c:d0:cd:28:bd:28:ad:24:cd:79:35:e8:7a:
         fb:50:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:34 2024 by rpki-client on console-fra.rpki-client.org