Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa
File:                     64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa (raw, json)
Hash identifier:          PFRpt9t1qPoI2mQKq+dOq9UaJep+6PC0ja1E5TE0ZXc=
Subject key identifier:   03:FB:F3:6F:F2:42:93:24:34:82:CF:82:9D:08:B8:6D:09:B1:0E:89
Certificate issuer:       /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial:       010D0C9F432858478F8127F1806A6ABC5C732300
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     14618
IP address blocks:        199.43.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:27:f1:80:6a:6a:bc:5c:73:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=fd27df40-c863-4164-96ec-facaf65816dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:99:b3:9c:55:ae:5a:09:de:95:39:21:c3:
                    ea:91:ba:43:cd:47:33:4c:05:5a:0d:d0:09:ec:52:
                    3c:8b:89:7f:18:21:31:44:07:17:27:63:80:fc:93:
                    0a:82:0d:d1:43:5f:9d:31:ae:e7:25:e6:27:34:9d:
                    28:1a:15:94:00:13:5d:de:20:68:13:29:47:07:a7:
                    7d:55:f1:df:7d:da:27:f3:b8:c7:6b:96:d8:9f:ac:
                    eb:8d:71:6a:26:36:ec:f1:33:17:b4:ed:87:7b:8c:
                    b0:28:9a:7e:ee:74:52:0d:0f:2f:1c:c4:db:0a:7a:
                    66:3f:7f:d7:37:11:3e:a1:1f:d2:76:d7:e1:81:15:
                    d8:2f:06:c7:2c:e8:ae:02:47:ce:ca:c6:6c:6b:22:
                    0f:da:9c:9b:33:fd:ff:f8:c2:13:b5:23:1b:0e:f0:
                    81:7e:8e:72:ba:87:24:8d:89:88:a0:6a:8a:33:4d:
                    76:9c:d9:d6:05:02:2b:b5:75:be:bd:e4:8d:17:c2:
                    dc:ab:49:c8:63:d4:03:36:d9:0f:b9:99:ab:03:1e:
                    00:f0:9b:49:93:02:e4:11:ae:6b:85:99:57:2d:c0:
                    b4:f4:56:27:63:5b:2c:bd:11:f1:52:2e:f6:5b:fc:
                    f2:83:1c:9f:55:7f:6d:13:29:b9:f9:04:35:7d:74:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FB:F3:6F:F2:42:93:24:34:82:CF:82:9D:08:B8:6D:09:B1:0E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:91:3a:c4:f7:be:c1:ab:dd:2f:99:a4:25:ef:5c:87:2a:
         ac:d8:6c:8f:d8:b4:29:59:86:33:dd:6f:dc:ea:2d:c2:9d:d5:
         4b:09:27:77:61:07:d1:bd:cc:e1:ec:da:00:e0:38:cb:d1:60:
         50:b9:65:58:46:41:8e:fe:90:30:f9:bd:0c:8e:ff:2d:c9:1e:
         a2:3c:c7:74:b1:53:a5:ca:16:fd:cc:fa:b1:7f:ff:83:b1:16:
         e7:7b:96:71:6f:a8:a4:80:8b:69:94:4e:dd:62:d9:b6:5b:d9:
         d4:a8:07:9d:09:cb:ab:84:6f:12:d2:88:c9:8a:aa:7d:af:a6:
         8c:24:b3:30:1b:21:b4:a6:20:7c:19:76:8d:a0:76:1f:98:2c:
         d1:1f:91:cd:a6:24:c5:0f:b5:f5:c7:1f:8b:2d:18:43:7d:82:
         b7:f6:d9:8f:76:38:db:0c:66:7e:52:6b:80:90:03:c2:6c:ce:
         f2:7b:c7:98:85:48:78:ff:d6:b5:d2:aa:92:4c:2a:b6:c6:fe:
         9e:c7:0c:4d:fd:28:de:83:76:3b:17:1a:1f:a3:ac:32:8a:77:
         fa:8d:be:20:ab:e9:18:01:c6:e9:2b:6e:94:0a:36:23:13:fd:
         6f:24:b8:cf:c6:d0:87:0c:38:69:bf:11:e6:02:a2:dd:6b:54:
         17:61:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:44 2024 by rpki-client on console-fra.rpki-client.org