Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa
File:                     cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa (raw, json)
Hash identifier:          +42kFoCfVff8OA2UrGj0HSoUwujMwGuXVncu3mNLbUk=
Subject key identifier:   56:11:5D:B8:B6:33:02:40:D9:49:0C:63:E7:A9:DD:0B:6A:4A:86:D8
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584765A0E5EC316A3FCD0EB3B360
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     36231
IP address blocks:        141.193.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e5:ec:31:6a:3f:cd:0e:b3:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=ef0ae60f-6b2f-4fb4-b948-252d595d9c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:e1:a7:cd:da:c4:b8:c5:27:17:cf:d1:a0:
                    a6:e4:7e:74:53:34:ab:96:49:5b:00:ef:92:f7:11:
                    f0:b2:85:a3:86:7b:b7:35:10:16:a9:64:2c:8c:92:
                    2f:12:4c:c3:fb:d9:4c:6c:83:bb:8f:48:a6:52:d1:
                    97:94:07:b9:d0:53:55:ec:02:c9:df:4a:04:d5:c0:
                    d8:8a:d4:07:33:aa:66:5b:a9:a2:d6:82:59:6b:53:
                    05:c3:ec:8f:69:b4:96:92:47:02:3f:fa:89:8b:ff:
                    3a:0d:5a:32:86:d8:71:01:a0:35:96:2e:b4:1c:ff:
                    06:2b:69:cb:ca:c6:fb:e4:4b:03:a6:76:43:d2:b6:
                    f4:82:63:c4:ab:45:48:a0:a2:e7:51:bb:e0:99:02:
                    6d:84:62:e4:49:cd:eb:9c:49:56:6f:be:0f:3c:f3:
                    65:62:cc:3a:cf:85:ed:de:6c:60:18:7d:7b:a8:f9:
                    7a:15:26:54:86:06:a8:89:2c:21:a3:c8:7a:01:7b:
                    cf:ff:d5:b2:f3:9e:d2:5f:d1:63:95:ae:37:92:ae:
                    ba:3e:8b:9a:a6:91:14:68:05:a9:a6:31:b2:00:7a:
                    eb:33:15:67:4a:3f:87:68:d8:45:82:1e:db:14:8f:
                    4c:2c:b4:1c:56:6d:be:7d:bb:43:5f:41:98:85:64:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:5D:B8:B6:33:02:40:D9:49:0C:63:E7:A9:DD:0B:6A:4A:86:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:73:48:9a:1c:37:3b:39:66:8d:8e:a1:50:54:c3:27:4f:69:
         e1:92:16:c9:df:f1:8a:d0:e6:c7:da:31:26:09:a9:f9:6b:b3:
         48:f0:20:22:08:ae:1a:71:f8:a3:b0:69:77:7a:99:68:e2:8d:
         db:d0:62:6a:e3:fd:15:bb:27:c2:38:a0:33:0f:92:c3:4d:11:
         e7:ee:db:07:38:e3:12:fd:d7:5a:f3:17:35:c5:1c:da:39:da:
         30:42:03:b3:a9:02:58:c4:85:f5:0e:71:5a:8a:cd:21:d6:b5:
         8f:2b:31:30:b0:d8:80:cc:68:06:0c:0c:fd:51:46:1d:f1:9f:
         81:73:5e:2a:7f:6f:88:ca:1a:b6:aa:f4:62:8d:36:a6:67:21:
         93:57:bb:ff:23:21:66:5e:82:e0:2b:68:b2:59:11:e8:64:5c:
         63:93:9f:3b:af:86:3f:b7:0f:3e:5e:8f:d0:91:76:c7:45:34:
         8d:d6:57:f6:ab:d6:22:29:9b:b6:07:36:e9:dd:5d:35:72:a0:
         24:db:b5:40:fb:67:f4:1a:8f:39:d6:2b:76:f5:bc:db:61:ab:
         bf:7b:c2:f0:92:0c:c9:29:d1:91:97:06:63:95:97:89:11:d8:
         d2:b5:ec:69:fe:ca:30:3a:7a:48:ac:a5:6f:d4:fc:a5:ff:c5:
         5e:0e:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:17 2024 by rpki-client on console-fra.rpki-client.org