Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa
File:                     768d6547-bd3f-3b1d-937c-edf695cd6dea.roa (raw, json)
Hash identifier:          xY62LdQi7a84fij47+ri+VIK72DclZ96gkkiwAunf98=
Subject key identifier:   8C:EC:35:49:96:78:A1:C3:74:C7:74:6D:40:22:E4:A8:97:76:2C:14
Certificate issuer:       /CN=4113c935-d29d-41b5-bec0-a7395bdeac99
Certificate serial:       010D0C9F43285847213B1C5B8D66A203BCC08200
Authority key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     32748
IP address blocks:        199.195.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1c:5b:8d:66:a2:03:bc:c0:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4113c935-d29d-41b5-bec0-a7395bdeac99
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=9f7aa083-edd8-49db-afbf-89bc904de79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:ab:28:6f:32:fa:30:9a:0c:54:a2:72:f8:
                    4b:65:84:c2:25:c7:06:9b:1a:64:82:8c:86:c4:07:
                    d6:e7:a6:6e:7b:93:fe:af:2c:eb:2b:5a:05:08:1f:
                    59:ac:5e:32:7a:06:b6:0c:e6:38:d0:dc:e7:6d:19:
                    97:01:c4:83:18:ce:41:d7:db:53:09:5d:6f:3e:1b:
                    c8:85:52:c6:96:af:10:19:31:9e:db:b7:90:d1:e9:
                    70:a6:e6:0c:f8:8f:da:23:47:bd:2e:c1:e9:68:6d:
                    65:e0:d4:e8:40:89:45:0b:a1:50:a1:6d:09:ff:4b:
                    0a:3a:e2:45:d4:bc:a8:b0:4c:52:b9:d1:04:e8:91:
                    aa:d5:bc:00:a5:d9:aa:b9:96:3d:27:52:b1:27:16:
                    99:d2:c6:fc:7f:d2:d2:c1:4b:41:91:c6:c4:82:e3:
                    af:33:a1:ed:02:4e:6c:49:ae:41:2a:07:09:31:bb:
                    5a:99:c3:89:f5:ae:ae:bd:49:30:22:24:20:93:2e:
                    ba:e5:3b:4e:43:0b:ef:2b:62:b7:fc:cd:07:49:24:
                    82:34:46:6f:27:ee:0e:46:1b:a0:b8:3f:59:5e:57:
                    58:bb:a7:81:a6:35:39:b6:5c:ba:6b:b3:c3:37:08:
                    30:68:c5:8d:36:81:3f:b0:18:e8:0e:94:24:c9:d6:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:35:49:96:78:A1:C3:74:C7:74:6D:40:22:E4:A8:97:76:2C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl

            X509v3 Authority Key Identifier:
                keyid:18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:0a:d6:1a:c9:b3:2e:e1:af:28:7b:5c:c4:12:db:76:9b:
         03:2d:be:de:ed:2a:7e:70:28:97:b7:28:19:39:f2:75:34:66:
         29:04:9c:87:b4:24:c9:0e:23:b8:42:48:5a:9e:6c:02:94:3b:
         a6:3f:29:73:c0:29:93:9f:fc:de:0f:ad:51:d5:5a:e5:a0:e5:
         5a:88:b7:7b:b3:ad:10:67:77:e4:dd:03:ff:47:52:e1:a8:6e:
         7a:1c:e7:c9:b5:63:04:23:00:66:30:97:e5:9c:d7:51:cf:ca:
         f6:66:a7:83:aa:9f:f4:49:b6:21:06:ef:60:22:84:96:1c:0d:
         c6:9a:b5:78:bc:2e:9e:18:39:33:c2:59:69:54:a1:4f:4f:db:
         77:2a:b8:33:9f:2f:68:81:58:25:c0:f2:96:68:d3:21:79:2d:
         f6:fa:19:a9:eb:9a:1c:dd:22:93:29:a6:57:db:c5:ac:85:29:
         94:bd:c6:fc:38:00:56:fb:af:f4:95:78:b1:80:c1:b1:14:ad:
         59:f4:25:40:b8:eb:15:ef:e9:49:00:fb:a1:1f:94:0d:f1:f7:
         df:c8:f5:16:fd:cb:28:79:1d:58:95:60:22:a3:22:2e:30:c1:
         50:11:bc:71:ae:22:2d:88:6f:c2:79:7e:95:1a:b3:4e:6b:a3:
         42:d9:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:27 2024 by rpki-client on console-ams.rpki-client.org