Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
File:                     f6cecee3-04a3-3f44-9077-09ff10710455.roa (raw, json)
Hash identifier:          PEratykF2NVBhosuq1s6+dBlvmz7aVKJR04lbGt0ZlY=
Subject key identifier:   93:83:81:21:AD:3A:57:19:BE:A8:83:0A:51:5A:47:B7:C7:1C:B9:D0
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584750B0A54AEDB52D7D6C89D600
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     54363
IP address blocks:        199.193.20.0/24 maxlen: 24
                          199.193.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a5:4a:ed:b5:2d:7d:6c:89:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=5fded5f5-feec-4f0e-9762-ac13e204f73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:45:5f:1a:a4:eb:af:c2:20:2f:d6:6c:eb:
                    fc:bc:84:db:ba:ad:82:0e:34:a8:36:b5:76:4c:88:
                    d3:b2:5b:37:b0:d2:92:e3:d0:10:55:f4:cc:a3:68:
                    20:22:ae:88:9a:01:55:8b:3d:76:e2:6a:1a:f7:6c:
                    57:49:d1:f6:87:c9:7b:7b:95:ca:28:00:c4:e3:bd:
                    36:07:7d:c0:27:5c:89:ac:ef:8b:4e:53:7e:a3:f1:
                    33:19:98:b4:fe:ea:0a:4c:51:ae:b7:0a:45:fb:14:
                    b4:b3:d8:60:36:fc:21:6a:35:fd:a4:10:d4:c7:3b:
                    c6:5f:da:98:86:e3:d7:69:c1:64:ae:25:71:65:bf:
                    d8:d6:17:8b:f4:6d:cb:c4:c8:49:d8:a7:c3:f9:0f:
                    34:19:fd:fe:e7:18:42:c6:d3:ae:c2:47:26:53:66:
                    82:96:36:be:ff:c4:0f:01:cd:83:fd:98:b5:34:0e:
                    e7:49:b1:7e:0b:22:3e:cb:cc:2a:b4:3c:1a:2b:56:
                    c0:af:6d:2f:f9:87:2b:48:8e:4d:d7:11:1c:d0:a1:
                    95:f1:7a:c9:a1:0a:56:df:34:e0:16:cb:dc:76:c7:
                    d7:43:b3:b5:ef:03:41:0b:56:b9:95:cb:27:40:41:
                    8c:ee:51:46:46:fe:fc:60:6b:03:56:f1:3b:79:dc:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:81:21:AD:3A:57:19:BE:A8:83:0A:51:5A:47:B7:C7:1C:B9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:34:17:95:86:d2:e0:a0:3d:6a:16:e4:0f:7d:6e:e6:22:71:
         16:14:c5:bf:86:1b:90:1b:ad:3a:35:95:a7:22:e3:86:cf:3a:
         d9:35:1b:e3:2b:6c:d4:17:f7:0d:cf:96:6b:6d:f0:c4:1a:d9:
         3f:8a:e1:13:d5:15:f3:52:35:23:2a:4e:b1:3e:22:db:cd:1d:
         8f:af:7c:16:b7:d8:a2:22:6a:14:dd:12:64:c1:b7:44:a8:51:
         04:c1:08:39:9e:b1:39:25:98:df:bb:ad:63:1f:44:f1:e0:3d:
         d0:33:0a:5f:c8:50:95:e6:92:68:3d:fe:55:db:2c:03:35:6a:
         46:f9:cb:3a:ee:c9:83:62:97:1d:7e:63:7e:16:e3:58:9e:5e:
         14:7e:45:f8:9d:6a:cc:d2:8a:0e:5f:fe:e8:27:47:b9:46:bf:
         28:4a:4d:52:7f:6a:d0:59:41:0b:59:0e:7d:22:aa:86:cb:d3:
         6a:c6:a9:fb:34:80:53:27:fa:6f:64:43:9f:6c:d8:09:48:eb:
         27:2c:e0:6e:74:2d:73:8b:8b:7a:d5:b7:86:3e:8f:81:68:95:
         9b:4f:9c:d1:af:35:44:48:75:40:25:b5:be:90:1f:a8:c9:41:
         d6:39:66:70:11:b4:67:d7:b1:c7:45:f1:78:1b:9a:de:eb:fc:
         8a:71:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:35 2024 by rpki-client on console-ams.rpki-client.org