Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/991a7006-38a0-3f2b-aca9-6c84379943bd.roa
File:                     991a7006-38a0-3f2b-aca9-6c84379943bd.roa (raw, json)
Hash identifier:          XovfEBlMKo4bvwTVyZFLLIGqmCWV7VXNQJfvwjStSV0=
Subject key identifier:   87:DC:4E:E0:14:62:09:40:B1:3F:1A:B9:D3:92:46:D2:93:8D:D6:78
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E60EA2C368238ADED881080
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/991a7006-38a0-3f2b-aca9-6c84379943bd.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     9823
IP address blocks:        168.146.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:ea:2c:36:82:38:ad:ed:88:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=977b9549-4192-4160-83e9-d43d9fca3772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:bd:68:e7:10:9b:f8:da:2a:e4:7d:5b:f3:
                    d2:51:28:e1:a0:e1:3f:a3:ef:ef:dc:a4:19:23:72:
                    87:82:d4:db:63:96:c9:ae:c5:5c:8b:78:24:4b:9b:
                    a0:5b:bc:dc:92:67:40:0f:50:98:e4:8a:ac:37:58:
                    dd:62:66:af:e7:65:74:3b:6b:bf:89:05:80:2a:06:
                    56:68:52:8d:d9:ce:da:4f:2f:f5:b7:67:42:2f:cc:
                    06:6c:5a:e4:bf:0f:38:8f:61:37:12:4e:63:48:4b:
                    ea:4d:8d:cc:50:b6:65:52:56:aa:73:85:1f:79:ec:
                    bd:d3:b2:63:89:0b:77:08:3d:a7:7d:79:25:0e:1e:
                    2c:07:64:8b:ec:6c:9d:21:0a:5d:ac:0b:19:c0:60:
                    38:3d:ce:a7:c2:ed:1d:a2:85:22:6d:bb:f3:b9:9f:
                    be:fb:6a:4c:41:61:28:f5:44:1e:c9:04:c7:e7:ca:
                    c2:e5:8f:05:a8:55:44:fa:3a:97:b0:f5:4d:f2:4c:
                    a7:d8:f1:72:a9:fd:1e:eb:56:69:d4:2c:3d:d3:d0:
                    4a:85:18:7d:0f:1c:40:22:52:79:ea:aa:90:eb:cb:
                    51:94:09:76:bf:64:c6:af:42:48:cf:69:9d:2d:94:
                    7d:a1:84:e8:47:76:b7:d7:73:96:5d:ef:7a:ae:e5:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:4E:E0:14:62:09:40:B1:3F:1A:B9:D3:92:46:D2:93:8D:D6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/991a7006-38a0-3f2b-aca9-6c84379943bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.146.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:be:51:28:1e:61:83:2f:69:df:b9:2c:69:15:9c:71:3a:80:
         36:7b:8c:15:2e:72:78:5a:bb:9a:17:dd:02:43:76:ed:14:60:
         6c:3f:6a:a5:83:8b:d3:19:0e:5c:12:6a:3d:48:ee:7a:27:43:
         56:13:e8:e5:61:f4:76:7d:fe:2b:68:6b:f4:fa:fe:38:4f:49:
         8d:7c:f3:3e:02:12:ed:ef:77:67:95:52:15:fa:2a:af:f3:9d:
         b4:83:47:2a:e1:5f:4d:ea:fc:4f:3c:25:33:eb:78:0c:3c:ea:
         f8:03:5c:7a:da:65:75:ea:35:30:17:47:e6:34:d0:98:ab:19:
         6f:fd:c7:b4:6c:79:5f:37:c7:41:1d:1c:c2:b7:9e:a5:ad:f5:
         0b:57:0f:72:49:75:8b:97:20:65:9a:6f:ac:3e:89:b3:89:ec:
         04:81:49:21:24:34:5b:b9:0e:47:26:5f:59:f7:a2:af:d3:b5:
         70:59:1d:4b:9e:ad:83:d5:1e:05:22:c2:bd:17:fa:96:72:94:
         cf:a5:01:7d:24:63:ed:2f:cc:a4:35:62:16:ec:3b:7d:48:e5:
         0d:bc:5f:99:bf:da:e3:b7:93:cf:b0:7b:92:1e:91:0b:1b:42:
         51:e9:a5:66:36:e8:d4:1e:38:1a:aa:ff:2a:a7:2f:11:06:f2:
         f6:78:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:04:28 2024 by rpki-client on console-ams.rpki-client.org