Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/193a6cbc-6595-3230-9cfc-6bf40ccedea1.roa
File:                     193a6cbc-6595-3230-9cfc-6bf40ccedea1.roa (raw, json)
Hash identifier:          BfqjuultuNoSDiSwteHiKfiGwLLQ6zWfXThDh+zk3xo=
Subject key identifier:   28:56:FD:99:95:56:07:17:AF:1B:6D:44:A2:48:AB:21:ED:9F:BE:D9
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858473D2604DEEBBC0032D32472B0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/193a6cbc-6595-3230-9cfc-6bf40ccedea1.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        130.250.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:04:de:eb:bc:00:32:d3:24:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=402d7f6c-5d88-4523-81b4-b5d4b165c80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:71:39:7f:ad:09:19:81:1b:86:75:82:10:
                    25:81:e4:ac:96:ac:53:e4:44:b8:ed:fe:0e:85:12:
                    50:d7:5e:66:42:40:8e:83:1d:28:34:89:0a:43:6e:
                    3a:a1:fb:44:b6:0b:80:c4:b6:cb:2d:3c:c2:4a:be:
                    13:3d:12:e5:da:03:83:85:0d:24:c9:b8:8b:f5:05:
                    10:ee:9a:8e:04:44:12:ca:69:24:57:b6:22:2e:04:
                    3b:2c:11:91:35:40:db:9a:3c:1b:c3:04:93:65:62:
                    f3:0e:76:94:8c:cf:76:21:74:d6:2b:13:0a:61:47:
                    38:a1:4b:0e:1a:3d:62:bf:cf:7b:af:f0:59:fd:bf:
                    81:5c:30:f5:a6:6c:6e:be:3d:d8:d9:c5:7d:03:15:
                    54:89:0a:18:4c:56:95:95:74:85:c1:2a:f9:59:58:
                    2e:81:31:c4:06:3a:c9:37:5f:63:c6:8a:7e:0b:e8:
                    b6:f0:ea:b4:24:27:de:47:4a:43:0c:9d:2e:ca:3b:
                    44:22:44:33:74:88:58:28:8b:92:a2:73:de:00:b9:
                    e1:a6:9e:c5:ff:03:4a:ac:cc:e6:59:52:51:89:e4:
                    e1:dd:dd:34:ce:fb:d5:a2:3f:54:9d:78:60:66:b5:
                    9c:c8:e1:5b:58:b6:6e:ac:42:dc:83:22:cf:06:0f:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:56:FD:99:95:56:07:17:AF:1B:6D:44:A2:48:AB:21:ED:9F:BE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/193a6cbc-6595-3230-9cfc-6bf40ccedea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:c9:96:e0:5e:b9:11:0c:e1:d9:b7:fb:09:de:98:41:9a:
         a4:90:85:d6:67:83:78:75:2a:5c:0c:62:9a:b7:a2:2b:82:4b:
         5d:40:29:32:d2:a4:36:14:85:22:fc:8b:dc:fa:a2:38:24:a7:
         c4:18:75:98:20:86:78:97:04:eb:0a:b7:04:a0:da:90:89:4a:
         6b:ce:3c:80:01:66:dc:9d:5f:42:67:f0:5a:82:a3:3f:b4:4c:
         b9:d6:b2:3b:c1:1d:ad:f0:4a:ae:f4:0c:57:fb:9c:3b:54:12:
         e0:c4:63:28:7a:f9:cd:b0:61:44:9d:22:cf:09:e1:c6:87:61:
         93:cf:16:ff:f0:0f:9b:67:5a:db:52:a3:a8:86:a7:9b:1d:c1:
         c2:8c:ec:bb:84:14:9e:50:f9:e2:23:48:00:ba:98:97:cb:ba:
         af:da:f5:82:ba:ff:5a:74:13:ca:af:bc:99:cc:2b:c4:1a:8a:
         ae:fd:5c:4c:f0:6d:5e:5b:03:9d:81:f1:91:47:ab:62:f0:90:
         a9:7d:b3:48:38:cd:f1:33:b0:6b:5d:8c:5b:75:a6:c2:eb:cf:
         e1:2f:ff:30:09:4a:f2:74:61:64:fa:79:d4:3b:ab:5d:cf:f4:
         76:f6:f2:34:94:ec:c0:6e:8a:9d:39:01:14:4d:6e:01:62:5f:
         fc:41:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org