Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa
File:                     8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa (raw, json)
Hash identifier:          8nQ+MX6Y5yCvRI/iFy8hYZo5eIb8ML/NCBwBBZmLPHM=
Subject key identifier:   32:51:C9:B3:8D:54:61:77:6C:16:75:71:0D:6C:27:C6:E3:85:CA:FE
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F432858473E8B485B48A8604B59C5E520
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa
Signing time:             Tue 17 Sep 2024 13:00:41 +0000
ROA not before:           Tue 17 Sep 2024 13:00:41 +0000
ROA not after:            Mon 16 Dec 2024 14:00:41 +0000
asID:                     393891
IP address blocks:        192.103.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:8b:48:5b:48:a8:60:4b:59:c5:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Sep 17 13:00:41 2024 GMT
            Not After : Dec 16 14:00:41 2024 GMT
        Subject: CN=3aefd0f8-c6d4-4216-9d5e-b0d13a007428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:b6:9a:e8:47:5c:29:a3:40:99:84:11:60:
                    74:05:59:8a:f6:ca:b5:50:58:f0:83:d7:a4:b4:31:
                    3d:d7:a2:3a:e3:c2:63:55:89:7b:4d:72:06:37:9c:
                    9f:ea:1b:e2:b9:1c:bd:35:ca:00:74:fc:d7:6a:75:
                    88:35:87:3c:7a:27:0f:13:51:bb:d1:66:78:0d:48:
                    c2:af:35:b3:8e:95:f7:49:06:a6:d9:4c:83:bd:0b:
                    fc:7f:fd:10:d6:38:c5:16:b1:c3:5f:a1:88:e7:2b:
                    c5:df:2c:2f:73:54:8f:c0:e5:d7:38:f2:2b:71:a2:
                    08:ec:c8:98:ea:ab:f5:52:17:c0:c7:d6:ac:c1:93:
                    bf:99:9a:40:83:90:af:c4:b4:da:ac:db:a6:63:6c:
                    9d:87:88:c0:07:ef:61:a8:1b:ff:62:7f:11:42:fc:
                    07:e2:47:49:82:f9:f2:ed:b1:58:19:6a:87:bf:f0:
                    ee:25:a8:63:36:aa:d0:a6:1e:e6:b7:cf:6a:45:f6:
                    d8:4b:67:0e:19:85:dc:10:e8:9c:da:5d:af:e3:28:
                    0a:b7:3b:75:d4:d3:ba:77:3d:9d:c3:ec:dc:05:3e:
                    57:7c:24:54:73:bf:35:f6:31:b9:dc:bf:79:1f:9b:
                    8f:31:fc:4e:2b:2f:a9:70:6f:a7:25:05:12:84:b3:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:51:C9:B3:8D:54:61:77:6C:16:75:71:0D:6C:27:C6:E3:85:CA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:49:58:09:ad:a9:2e:fb:af:34:f8:c4:13:9a:95:f4:a8:
         50:e3:e8:a5:cc:54:01:1f:28:ca:49:79:da:de:71:f5:16:6f:
         2d:62:45:ae:b7:da:68:91:5c:8e:9a:96:97:86:9f:cd:bf:7d:
         ba:e1:3f:d4:3b:d9:36:f8:f8:74:21:35:72:34:ca:9f:e0:27:
         45:f1:d3:f5:12:96:06:27:07:bc:b1:ef:2a:61:e8:a2:8e:c7:
         9e:a2:1f:c2:2b:fe:74:74:51:28:82:e4:23:e3:5f:62:56:29:
         58:46:eb:29:92:f7:5f:f4:b0:05:e4:3b:1d:7e:88:05:47:eb:
         bf:83:32:de:bf:4c:70:6e:19:ab:31:6c:06:35:23:f7:f6:6e:
         9a:17:5f:72:e5:a6:66:ad:ef:29:40:01:d9:6f:52:4d:fa:3f:
         e3:05:b6:1a:2e:1a:93:7f:55:b3:1d:2a:bc:da:98:0c:91:d4:
         b5:5d:ba:25:1b:10:89:56:11:27:44:ec:ea:d5:70:08:97:04:
         cb:ea:b0:14:89:d2:eb:cd:d3:6a:e8:ac:53:ff:a0:ac:ea:69:
         f1:fa:ba:ac:84:04:f2:b2:18:20:34:f3:5a:f0:8b:47:97:47:
         2b:9e:09:b7:67:74:59:f0:96:78:ec:ba:f1:e0:1b:7f:59:90:
         e3:64:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:04 2024 by rpki-client on console-ams.rpki-client.org