Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
File:                     12e8f2aa-b31f-343f-ae06-06df3af584f0.roa (raw, json)
Hash identifier:          L8BMmRpSDHl16BO18cGJMzwK6EYBgpeuaO26gTaYqmk=
Subject key identifier:   99:51:9B:7B:AF:88:9B:20:9D:CD:81:BE:51:3A:F2:EF:4D:11:BB:F1
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858474850B7E975C57A636015EA40
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     396998
IP address blocks:        141.193.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:b7:e9:75:c5:7a:63:60:15:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=1752a90a-957b-474d-925e-195af2cb67af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:0c:57:80:02:08:f0:0f:8e:54:54:e4:ab:
                    a2:2c:2e:5b:bd:0a:39:1c:2a:11:d6:67:bc:c3:dc:
                    b2:b7:aa:fe:ae:e9:3a:fb:9a:32:56:fa:bb:ed:75:
                    e9:ad:b7:c5:6f:3e:48:8e:72:d1:12:f2:48:d5:df:
                    c4:2b:3c:5f:38:37:19:be:fb:e8:9e:86:2e:01:d3:
                    b5:a5:49:bd:da:3e:f8:5e:d0:3e:7b:78:71:5e:3e:
                    f5:1b:0f:72:80:64:30:0e:0f:f6:64:bc:df:a6:87:
                    ea:2d:0f:6f:62:57:c6:83:fc:fd:00:37:d9:fa:ce:
                    4f:d4:c0:1a:27:4e:ac:2b:71:a1:3f:b6:a6:90:c5:
                    38:38:b6:d1:c9:3b:74:72:46:8e:8b:8f:bf:a7:67:
                    85:3e:58:a5:30:63:7c:37:20:26:63:01:ef:93:08:
                    3f:a2:a4:6a:66:40:56:e0:01:3c:38:d2:d7:ea:7a:
                    bc:f5:5d:19:e6:b0:25:c5:a4:6c:d2:af:3e:4d:58:
                    9f:8f:62:c0:9c:0e:60:72:9d:b7:49:dc:4e:4f:78:
                    f3:b1:1b:f7:c1:fc:f1:01:24:b0:aa:50:40:37:6f:
                    ad:cc:90:72:40:b4:41:4b:36:01:a6:06:11:31:ee:
                    3f:9c:59:b6:d1:31:5c:00:c6:6c:60:c4:90:3f:46:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:9B:7B:AF:88:9B:20:9D:CD:81:BE:51:3A:F2:EF:4D:11:BB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:64:89:e0:0c:17:c6:54:ee:1d:24:f5:86:ff:40:2e:09:08:
         ec:84:ab:c2:83:36:cd:af:50:a4:bd:81:b7:0c:fd:03:84:3b:
         3f:83:2e:2f:82:60:0e:c6:89:ab:ba:0a:b9:52:b9:06:db:9d:
         f0:17:0d:0d:23:c4:0f:77:88:ed:b3:be:46:a4:26:8c:9c:7e:
         9c:67:0b:35:10:d2:ac:e7:73:fc:7b:f8:11:71:6b:4a:0e:c1:
         e4:54:f4:c5:e7:c6:6b:1b:9d:34:91:f7:be:39:a2:41:f3:a1:
         94:c7:0f:75:ce:70:43:2c:94:03:77:6c:fa:40:41:6d:98:75:
         a2:e7:bd:82:3c:db:da:68:50:6a:c6:21:fa:a7:66:d6:8d:3c:
         82:32:2a:74:b2:19:2d:f2:9d:82:56:0a:57:96:89:b3:9a:5c:
         67:ed:ca:34:99:02:ec:89:3f:cc:42:7b:6e:5d:19:99:7f:97:
         4d:86:5f:ee:fc:9e:3a:08:19:0e:bc:bf:61:9d:8f:85:3b:11:
         ee:4b:41:37:22:c8:4f:c0:12:2e:80:02:e6:62:07:30:68:65:
         86:c6:ab:fb:41:7a:fd:0d:4c:68:fc:89:f1:cc:ac:f8:cb:4f:
         b7:03:f8:a6:84:69:7f:cf:85:e0:f0:80:c8:60:9a:af:b9:52:
         a7:4e:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:17 2024 by rpki-client on console-fra.rpki-client.org