Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
File:                     01fd164e-7deb-3aca-97b2-be926935c45a.roa (raw, json)
Hash identifier:          +2o99D75bZjZLJVmfmJDUe+o9l7YGoFUVp4Xr39H6ho=
Subject key identifier:   93:E5:A1:61:3D:E7:A6:BC:BC:75:38:53:84:1F:31:CB:FD:B7:BE:12
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328584734C888767CAD2C9F38A51D80
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     393891
IP address blocks:        198.169.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:88:76:7c:ad:2c:9f:38:a5:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=4f5ea4e3-5523-4284-902f-9fc01b2c32f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:be:e8:5c:66:76:7a:62:be:d9:a5:47:b4:
                    79:96:25:05:3b:47:b3:f3:ca:4c:bb:90:fc:5a:53:
                    2a:98:d8:53:9b:52:38:83:56:33:7d:9b:73:cf:26:
                    6a:81:17:cd:74:71:dc:68:cb:c8:d0:12:a4:47:9a:
                    00:01:84:a7:35:12:41:58:0d:28:84:5c:6b:91:13:
                    dc:ae:fb:99:72:6f:b1:ea:4c:83:59:fc:d8:3e:88:
                    5b:8a:18:90:52:40:a6:18:70:05:51:38:5b:3e:63:
                    53:34:5d:84:cd:d5:b8:aa:0e:0a:7d:bc:03:88:1f:
                    17:ee:de:f2:0c:b0:b4:07:06:e5:b0:93:05:79:52:
                    7a:b6:26:8d:83:f1:f4:3c:28:dc:55:5c:ef:b0:52:
                    02:31:7f:83:00:03:58:ae:5c:65:43:04:9a:4a:83:
                    5f:dc:28:cb:70:40:8a:75:35:69:04:10:ab:fb:81:
                    8a:b0:57:8b:05:48:75:7b:c5:a5:4c:ae:6e:bf:77:
                    11:71:0c:c3:e7:76:03:66:be:e4:98:1c:a6:8d:cd:
                    d7:7c:7d:44:f2:5e:05:3b:76:d2:59:10:b7:53:8f:
                    6f:ad:3b:33:62:46:c0:e1:1d:f4:16:ae:ba:67:23:
                    73:ae:3d:91:fb:26:bd:1e:cb:10:f5:fd:20:86:64:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:A1:61:3D:E7:A6:BC:BC:75:38:53:84:1F:31:CB:FD:B7:BE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:32:91:90:9b:bd:a2:6f:db:f1:64:fd:00:8e:f1:6b:ee:11:
         38:c1:4b:41:32:2f:e6:ae:a6:8e:a9:48:8b:95:a5:5e:5b:7e:
         61:86:ed:4b:ae:ff:0f:86:5e:63:6e:59:95:24:de:90:b2:d3:
         1b:f3:02:d5:45:10:fd:9f:b1:29:35:00:7d:6c:80:a9:2d:33:
         fd:13:a5:72:04:a4:d3:92:cc:34:e9:86:9b:a4:15:57:a8:43:
         b7:75:b3:5e:d8:fe:3d:73:47:d4:b1:d9:d5:34:b7:a3:ca:d9:
         8e:c9:c5:47:c6:3f:5f:52:3f:97:4d:44:37:ee:64:87:b5:1c:
         85:e8:b3:84:84:03:78:f1:01:ef:d4:2d:96:63:38:62:6b:f4:
         79:e6:c2:50:fd:65:a7:8b:43:e5:91:77:83:2b:56:56:45:c8:
         54:09:82:51:fd:02:46:8b:df:68:2c:34:55:50:0a:ce:69:6a:
         9e:b5:40:1b:5b:26:60:03:5d:40:eb:93:7d:5c:48:5f:a0:0b:
         51:56:f5:b8:52:b6:fa:c5:30:8c:7e:77:1a:1e:70:8b:64:e0:
         ab:31:14:19:7a:b2:b5:ff:63:6e:d6:a8:99:b3:54:61:a1:07:
         83:64:24:eb:9b:67:ce:53:c0:fa:a2:d3:99:83:a4:63:ce:5a:
         a0:27:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:49 2024 by rpki-client on console-ams.rpki-client.org