Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
File:                     54fa5541-fc93-3994-8d7f-7112e1803d57.roa (raw, json)
Hash identifier:          85OTtfJmRGHsOdf5JQuwdQouBOTERWCX3vhLsvM4Px8=
Subject key identifier:   E2:28:83:E3:71:CC:E6:2E:A5:B6:A5:4C:26:DC:23:C3:54:C4:50:09
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584583035CF957F8C5D548998900
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
Signing time:             Thu 11 Apr 2024 16:03:45 +0000
ROA not before:           Thu 11 Apr 2024 16:03:45 +0000
ROA not after:            Wed 10 Jul 2024 16:03:45 +0000
asID:                     16696
IP address blocks:        199.192.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:83:03:5c:f9:57:f8:c5:d5:48:99:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr 11 16:03:45 2024 GMT
            Not After : Jul 10 16:03:45 2024 GMT
        Subject: CN=40a13a85-d6b2-4db0-aea4-63be60d077b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:99:44:8a:e5:cc:66:a4:ba:66:e8:da:ce:
                    c8:0c:e0:36:80:ba:1a:83:26:bc:7f:59:48:6e:57:
                    89:6d:c1:c5:99:97:35:83:a1:06:4b:5d:a7:c6:6b:
                    40:39:5d:20:91:5b:4d:d2:ad:b4:6e:14:41:c0:fe:
                    41:b2:f5:aa:60:f4:9b:6b:51:e1:60:a6:e9:1a:12:
                    6d:fb:5b:ce:0c:32:e3:8a:fc:5d:16:e5:fc:8a:45:
                    76:06:ed:ec:5b:c0:de:6f:18:53:a2:42:ca:7e:32:
                    37:34:f3:fe:ee:60:33:11:f3:48:de:a4:40:c8:be:
                    a9:f6:4c:87:78:e3:ab:0a:0d:25:e4:89:19:07:cd:
                    7a:a9:dd:f9:fe:a7:11:25:f2:73:48:5b:3c:a1:6a:
                    b6:25:aa:5f:47:a4:76:e4:c0:ba:90:ee:52:79:b5:
                    6f:fd:51:f7:79:ed:99:69:16:24:ae:12:cf:a4:67:
                    b8:bb:6d:5c:92:5c:b1:32:e4:68:d0:91:27:d2:d0:
                    1e:b7:03:07:80:62:7a:f4:48:0f:97:11:cd:00:d7:
                    e0:0a:ff:67:b5:ee:5f:73:30:77:f1:4a:20:5d:14:
                    53:0b:4d:33:4f:ca:98:06:cc:21:42:c0:39:11:14:
                    72:88:22:4c:37:57:3c:c5:6d:f5:09:a2:09:6e:4c:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:83:E3:71:CC:E6:2E:A5:B6:A5:4C:26:DC:23:C3:54:C4:50:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:94:1d:f2:57:2d:c9:6d:e0:5e:3a:42:a7:07:08:67:1f:
         9f:5e:1f:9d:9b:a5:3a:ad:04:7a:c6:b0:81:71:53:38:e1:1c:
         ac:9e:c1:dc:80:95:0e:50:f6:10:d0:5a:96:c1:df:fd:23:62:
         11:42:75:e4:2b:b2:64:39:e7:31:04:e3:4d:f5:9c:eb:4f:c9:
         d4:2c:80:7b:9e:e7:77:45:26:cf:4e:d3:58:a3:e9:45:4e:e1:
         59:b4:3a:38:48:6b:51:28:6a:50:a3:0d:56:68:de:e7:b6:5f:
         db:f3:7d:63:55:38:3b:40:7d:3c:75:49:1a:cc:56:0f:80:31:
         b4:9a:31:62:a1:3d:30:3a:fe:23:cf:ef:4c:05:8d:14:7d:d8:
         db:29:ca:1f:38:3d:13:df:57:06:8a:59:32:59:dd:44:65:a0:
         c5:6b:3c:46:d7:8a:96:86:aa:9c:46:b2:76:db:6a:99:fb:49:
         b0:75:57:28:37:b2:c4:bf:7f:d3:8c:29:0c:16:1e:59:9a:b5:
         e0:c9:40:ec:34:5d:e2:d6:09:65:93:a9:f8:d7:3f:44:4d:57:
         e7:47:d8:64:1a:d5:3f:18:65:d8:dc:71:57:31:56:41:20:2f:
         74:f4:fb:f8:8a:d0:cf:be:43:f6:9e:87:e1:0c:8e:85:19:3b:
         ec:28:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 16:32:11 2024 by rpki-client on console-fra.rpki-client.org