Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa
File:                     3004d2b4-bece-3042-9132-e897abee7f3a.roa (raw, json)
Hash identifier:          Hh4OtL5YPTF+wNGPK+ytTnSWXxuDunNBgEykFeeYNqs=
Subject key identifier:   B0:E8:88:7B:F1:75:68:95:63:13:AE:F2:EC:1F:78:76:EC:32:F1:0A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584793B110EF1641AE83FE29C7A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        192.35.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:10:ef:16:41:ae:83:fe:29:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=258b9382-1a09-4c7c-85d3-7b402b7c96be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:ae:48:62:55:5e:ee:aa:e4:dd:ff:a2:3b:
                    a9:81:de:b0:e3:2d:2a:32:bc:47:10:03:cc:74:d1:
                    a7:14:f5:3f:0c:5e:2a:f8:65:c9:8c:15:ab:f7:6a:
                    3d:2a:cf:45:43:ec:e8:c3:e7:4b:31:e0:4c:63:90:
                    ab:68:bb:1b:58:74:e0:fd:94:19:01:83:96:73:5c:
                    ca:ee:b1:e1:d3:d2:c5:8e:09:9d:cd:fa:bd:d8:ba:
                    4e:e6:e3:2f:ae:20:5e:3c:23:5c:c0:54:a1:3c:de:
                    20:65:ce:33:ac:62:b3:f7:59:89:df:3a:d0:d4:f9:
                    40:70:1a:e8:e8:3c:e8:8e:77:c4:78:71:72:e3:a6:
                    99:52:b6:b0:49:cd:74:23:50:c3:79:95:c8:e6:7c:
                    37:23:d1:e8:f9:91:f4:b2:37:67:fb:de:49:fd:bb:
                    7f:d8:7a:59:ad:e8:0b:76:23:16:68:70:e6:a4:2b:
                    00:57:46:9d:d4:c1:93:65:32:09:b0:1e:54:16:f2:
                    f5:9b:c3:a2:7e:59:d2:39:da:e0:cf:71:23:70:7f:
                    be:45:c5:67:e3:6c:c1:cc:7b:1c:13:53:43:de:6f:
                    dc:bc:aa:de:67:ca:ed:70:76:78:63:a0:2d:d3:85:
                    f2:fc:11:f0:6c:59:72:53:b1:de:6e:1f:1c:30:3f:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:88:7B:F1:75:68:95:63:13:AE:F2:EC:1F:78:76:EC:32:F1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:a4:fb:f3:a8:d7:0f:c9:aa:bf:5c:18:34:0b:76:c5:de:
         c0:bc:8b:10:34:15:8b:31:a3:f7:b4:60:c4:f4:62:b4:f1:74:
         05:ea:8a:bc:68:ce:de:6b:c9:e4:46:64:f4:ba:f5:cc:d5:51:
         70:a3:1f:7d:49:19:2d:48:16:84:3e:46:48:16:f1:9b:5f:ee:
         0a:9a:d7:ca:65:38:3c:94:23:6c:cd:b6:02:74:a0:9a:c3:f5:
         3d:75:82:b6:8d:79:aa:c7:f3:02:c2:00:00:8b:86:5e:09:d4:
         22:23:39:bd:14:bb:40:b5:b5:d5:4b:90:f7:28:1e:ba:95:4a:
         1f:c8:2f:ac:bb:67:bf:1a:87:3e:18:5a:5f:bd:4c:9b:85:6f:
         30:b4:93:10:20:b5:5f:7b:21:66:be:b1:9f:35:c4:b8:c6:01:
         fc:4e:6a:c2:7f:ed:36:07:45:c6:49:3b:07:76:cd:26:88:47:
         0c:9b:33:cd:c9:8d:20:55:08:20:b1:5e:c8:65:1f:b2:0f:e6:
         61:5a:71:2f:f3:f2:f6:79:9f:b6:86:e9:87:66:0b:31:7b:30:
         15:fc:e1:d9:9c:71:24:c1:35:ad:90:db:93:fa:8f:e6:31:8a:
         80:73:55:06:3b:e2:58:8f:20:62:1f:4f:93:02:39:cc:10:ce:
         9e:55:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org