Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/dcb55312-1e98-35c4-a787-68c615f34099.roa
File:                     dcb55312-1e98-35c4-a787-68c615f34099.roa (raw, json)
Hash identifier:          6XCR8Dj1k13jhxEh6rgslFrMCsXK/yi735n/JoJzmtw=
Subject key identifier:   ED:14:34:BC:C5:BF:1B:97:15:60:A4:58:8D:69:94:0B:37:46:62:4A
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858477EC10911EC484D4CAE805B00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/dcb55312-1e98-35c4-a787-68c615f34099.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     36231
IP address blocks:        163.123.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:09:11:ec:48:4d:4c:ae:80:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f6b4df36-7e7a-4005-8164-d112d4cee66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:f6:76:40:a3:e2:5b:f6:76:62:e4:e4:6a:
                    89:11:60:a8:6d:f3:b3:8b:79:45:89:af:22:cc:d6:
                    db:a1:55:f0:9b:1a:90:f4:ee:03:6e:cf:8c:3a:a0:
                    25:37:54:3d:03:df:1f:99:e8:0a:65:c1:d9:1e:84:
                    ab:53:f2:25:4b:64:db:3a:86:ad:e3:ce:43:36:4d:
                    6a:6e:54:b7:cc:ab:f3:3a:ac:d8:a3:c0:66:c7:3c:
                    d2:e5:64:7e:87:c0:4c:8e:a6:fc:85:99:54:90:7e:
                    c6:fa:96:bd:85:7c:6e:28:c2:b7:d4:6b:5f:07:08:
                    a8:e8:c6:90:d6:a8:ac:36:03:10:28:61:a1:d0:e1:
                    cf:de:1c:95:5b:5b:4c:97:ca:8d:89:c9:18:08:d0:
                    59:87:88:da:cd:6b:ef:aa:83:52:73:96:1b:90:a5:
                    db:63:25:b6:a1:c7:46:80:39:90:7c:e7:98:25:48:
                    47:49:b6:64:37:9a:ff:df:a2:56:f1:10:7b:af:6a:
                    f6:be:df:04:07:dd:11:15:d7:9a:84:bb:f7:45:c1:
                    9b:cc:e5:c3:65:e8:fc:71:f7:fb:9f:9e:af:96:02:
                    c0:d8:83:db:fb:66:19:eb:30:10:e8:64:da:ce:10:
                    fe:3d:be:81:0d:1b:51:c6:94:95:b3:b2:a4:21:f6:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:34:BC:C5:BF:1B:97:15:60:A4:58:8D:69:94:0B:37:46:62:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/dcb55312-1e98-35c4-a787-68c615f34099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:1f:46:ba:32:1a:83:1e:f7:23:0d:c5:ad:54:25:17:8c:
         85:ca:e4:4f:af:0d:06:d4:0c:90:e5:6b:58:94:44:9c:40:4e:
         aa:7e:c8:93:54:ba:af:d1:fd:49:19:43:a1:12:4e:0f:3a:57:
         93:ae:46:d2:cd:e9:1f:29:a6:3f:c5:1f:17:42:17:cf:89:65:
         5a:23:c5:0c:c4:19:c3:b7:ee:4b:2f:95:ad:32:f5:b0:f2:73:
         30:2f:74:c6:a9:49:7e:82:32:bf:08:39:e6:23:7e:14:8a:f6:
         93:0d:5d:3b:f7:77:95:3f:9d:2e:c1:33:9a:81:af:8f:cf:fa:
         10:56:66:44:c7:84:bf:40:a8:81:7c:bf:7b:2e:ba:34:36:2d:
         cc:a4:70:9e:5d:47:e0:03:63:78:7e:cd:b0:83:b0:9f:df:33:
         d6:dc:b7:c6:eb:cb:5b:b6:47:04:bc:29:5a:a1:27:1e:00:27:
         01:94:51:91:28:57:37:44:ec:06:93:8c:e0:50:81:18:f6:03:
         3b:cb:5d:8a:c8:c6:b6:78:bf:6c:20:14:84:13:d9:ef:da:14:
         b6:5f:65:e3:9f:07:79:ff:35:17:1b:71:44:66:aa:6a:4e:5f:
         29:41:4c:10:ff:78:9c:5d:06:be:aa:fd:48:f1:30:2a:6c:41:
         2c:87:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:17 2024 by rpki-client on console-fra.rpki-client.org