Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa
File:                     f97a8904-a92b-3e71-9209-0e718ad0a126.roa (raw, json)
Hash identifier:          H7k+MKSdXuaO1o9TZHtZaJjq8pGGtn89Gl/nNH2xnro=
Subject key identifier:   03:E5:C0:FE:14:02:D5:E5:E5:F0:BC:F5:E2:7F:21:D6:12:63:E8:DF
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F43285847C05C13E51F709EBF5CF42D80
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     10753
IP address blocks:        192.228.18.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:13:e5:1f:70:9e:bf:5c:f4:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=49ac4ede-657c-4071-b7f9-ef9a67bac242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:7a:24:f8:82:15:32:75:ae:cb:74:f0:dd:
                    8b:e6:9f:4e:65:9e:dc:79:5b:96:a2:ed:82:2a:82:
                    97:f4:4b:44:57:1b:16:5f:4b:1d:15:40:cc:68:ba:
                    ba:68:f2:39:8a:5d:5b:07:1b:5d:92:5a:90:ed:a9:
                    3b:de:e4:a9:09:10:a4:c3:6e:4b:0f:34:ad:77:6a:
                    ca:b8:15:70:d2:86:5a:30:a2:d7:82:7f:4c:40:4e:
                    28:54:41:3e:db:05:73:c1:d4:74:86:6c:a0:80:b1:
                    c7:2f:9a:cd:be:e8:4e:68:47:23:14:5f:fa:3a:e6:
                    0d:ee:b9:76:d4:70:68:d9:6f:19:6e:b0:35:92:9f:
                    a0:26:90:59:70:ad:8c:86:70:aa:56:c1:dd:da:89:
                    9a:30:78:38:90:ce:b2:12:87:2b:c8:b0:82:12:2a:
                    ad:21:fb:32:2e:99:b7:08:26:e7:3d:f8:a5:9b:13:
                    08:71:29:82:f8:66:8a:58:29:e0:c3:41:50:be:47:
                    ab:8d:6e:de:58:50:58:a6:27:fb:ee:9c:43:da:b3:
                    dd:48:bf:23:c2:5b:9b:38:d9:93:df:31:c3:ab:db:
                    fa:3f:d5:29:24:24:34:20:53:41:ec:77:15:b5:44:
                    37:49:b0:c7:91:35:74:1d:97:1d:92:28:48:c2:a6:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:C0:FE:14:02:D5:E5:E5:F0:BC:F5:E2:7F:21:D6:12:63:E8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:1b:32:3b:c0:c5:45:55:bc:1a:ee:2c:02:02:5c:20:6f:
         6e:83:c5:d2:59:e3:dc:34:f8:b4:82:63:83:a8:05:ce:2a:b2:
         aa:42:75:06:54:7d:f4:81:ec:ec:54:73:59:30:69:27:b2:a9:
         52:89:62:f4:68:63:cd:ba:c7:7f:7b:50:2c:5f:9b:c6:ad:de:
         03:c3:d2:47:e6:d2:62:50:8f:82:d1:67:26:c6:4d:23:13:eb:
         8a:3d:bf:1a:2a:3f:e8:cb:bf:ce:52:95:76:a4:9e:d8:c0:22:
         2e:c8:6e:60:a3:7d:a8:4a:a9:e0:f8:17:6a:82:6e:bb:4c:1a:
         5a:34:da:7f:75:11:f8:98:6e:0e:fe:31:05:a6:f4:c2:0d:bc:
         93:9e:1e:a5:a9:41:13:04:bc:b7:75:bd:84:c4:93:f8:d8:c2:
         4c:55:74:c5:c0:6f:5c:ca:06:3a:2a:02:32:2c:78:0e:1e:01:
         c2:7c:48:23:36:c8:9e:d9:2f:bc:2c:9c:ec:5f:a1:0a:2b:dd:
         b7:90:f6:14:0b:b0:39:9b:18:6f:9b:46:67:e0:94:5b:33:f0:
         cb:13:eb:16:f0:f2:b8:58:14:11:83:46:62:ae:e1:8e:1d:0f:
         5c:23:ba:46:3d:3b:74:24:93:36:c6:0b:ea:f7:d8:cf:b0:3a:
         59:09:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org