Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df5a68d-a369-36b6-8465-a97a6a70865a.roa
File:                     1df5a68d-a369-36b6-8465-a97a6a70865a.roa (raw, json)
Hash identifier:          jfm+JSRy1U18r7vYQgDjaxohv+qkvpL7/bYlbINcZW8=
Subject key identifier:   60:7C:65:A5:AC:0C:6E:46:B7:47:71:D2:C5:23:95:F8:3D:54:D9:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858478CB696EB739BD25BE3967080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df5a68d-a369-36b6-8465-a97a6a70865a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     0
IP address blocks:        192.30.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:96:eb:73:9b:d2:5b:e3:96:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=06a32ccc-5663-4386-bdc7-d85be1d5456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:95:17:53:8e:69:4e:e7:da:fc:1b:d7:c4:
                    49:2d:e5:fe:ec:8c:58:1b:95:d1:17:12:ce:9f:40:
                    82:d4:1b:f7:88:da:e4:e9:bf:3e:ee:c4:61:e8:98:
                    05:bd:ff:ed:48:4b:20:79:e6:c6:18:6a:36:47:f9:
                    d4:39:2c:98:b4:5c:e1:ac:08:33:bf:a8:53:ff:fe:
                    6c:59:c8:93:81:25:44:fa:7e:90:35:47:87:f9:e4:
                    f6:71:d9:4a:4a:8b:0a:57:96:e4:e7:45:e4:83:b9:
                    bd:44:f8:12:6f:7b:a7:da:9e:70:6f:12:57:41:25:
                    cb:3d:45:36:8e:c7:73:27:5a:b3:5c:3b:6f:6a:63:
                    cf:ca:47:06:e2:18:f8:06:ab:a0:60:08:3c:d2:f0:
                    f4:dd:56:cb:34:11:7c:fb:37:10:4b:40:2a:e8:fa:
                    bf:ac:db:b6:88:d1:63:4e:8f:27:f7:1d:e7:9b:35:
                    c9:69:dc:78:31:42:1a:f9:2b:e4:44:b6:0e:50:43:
                    92:57:43:3d:c6:21:00:27:24:4c:fc:29:2c:69:4a:
                    f3:f9:bb:4a:18:99:2a:c3:c0:be:5e:ef:9d:95:5c:
                    05:89:b4:47:1d:3c:af:c7:b7:1f:ec:0f:fa:41:3a:
                    a9:1c:27:09:07:36:f7:fc:70:6e:9c:33:06:1c:7a:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:65:A5:AC:0C:6E:46:B7:47:71:D2:C5:23:95:F8:3D:54:D9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df5a68d-a369-36b6-8465-a97a6a70865a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:1f:15:aa:8d:5f:7f:49:ef:33:21:40:9f:9b:9f:53:0d:
         98:d2:3c:0e:4a:6a:98:51:b5:e0:ef:d0:0a:f4:ff:46:62:0d:
         84:1a:94:2c:01:6a:07:1d:88:d9:67:58:7e:c0:79:57:4c:3e:
         42:fa:6b:a9:8b:2c:68:d3:69:3c:19:ed:a1:2c:7b:db:c4:a5:
         20:21:8e:c6:9a:ab:89:d4:bc:28:28:06:4e:e8:26:ad:c7:9f:
         df:ad:9f:0f:33:45:d4:7a:45:63:04:18:30:d0:cb:f3:9f:33:
         82:60:1a:65:cb:b6:cf:08:52:09:0f:d0:44:ea:4a:40:88:c9:
         12:42:83:90:19:42:7a:22:23:b5:e9:e6:df:0b:c1:e4:bf:9f:
         a6:c5:0d:6f:bf:e8:a9:1f:4a:54:a6:8c:38:04:27:87:e4:ee:
         db:9f:bc:a7:57:43:2e:1f:21:78:51:28:16:0f:c7:f0:38:43:
         3f:e1:0c:63:d0:dd:45:0e:6c:34:aa:13:f6:bf:43:78:4f:4f:
         f3:42:8f:0b:f9:c4:0f:79:e6:7b:65:86:39:cd:fe:98:bc:88:
         d9:a6:e3:0a:6c:ce:4b:f4:f4:bc:be:c9:32:93:c4:50:ef:22:
         6b:5c:71:3e:18:96:32:43:26:1f:66:eb:19:4c:be:07:f9:b2:
         74:13:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:33 2024 by rpki-client on console-fra.rpki-client.org