Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
File:                     5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json)
Hash identifier:          4iZgLA+uCaVGPDB/j0mfJm5A5UvCBzCHUb5rJ9w0G4M=
Subject key identifier:   C4:3E:9D:67:A1:FC:33:AF:1D:0C:AB:FC:8D:B4:0D:58:B7:1C:6B:78
Certificate issuer:       /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Certificate serial:       010D0C9F432858474C80C46D5EB8ACB68AF5BA00
Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        192.48.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c4:6d:5e:b8:ac:b6:8a:f5:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=37945dac-d34f-41bb-9214-83a2a55ac10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:34:b3:25:c6:0c:f6:df:0f:10:8e:a4:90:
                    cb:eb:71:e3:0e:ca:f0:40:23:87:06:ff:65:ca:23:
                    b7:c5:62:db:5a:c1:9e:a4:30:31:e2:d6:00:10:40:
                    16:56:23:30:ea:37:df:c9:4a:9f:2e:b1:3b:d5:3e:
                    e1:19:91:76:77:69:dc:20:e3:d3:94:52:3b:65:c5:
                    95:85:a6:70:ac:fc:b8:c0:77:59:1b:af:ee:32:9d:
                    ea:94:e4:27:a3:58:dc:09:06:ac:9c:2f:8d:9b:7c:
                    11:f9:76:bd:12:87:05:a7:18:7b:47:ee:57:4c:6e:
                    a1:50:5b:1d:2c:36:41:5d:16:f5:08:44:67:af:41:
                    6f:98:1e:47:34:22:0f:ec:8e:7e:e3:85:64:68:b7:
                    88:6c:75:a8:03:d4:be:44:6f:3c:b8:06:cb:2e:2a:
                    1a:ff:7d:69:7b:86:c2:33:7b:f8:ad:8a:93:b1:de:
                    33:ed:fd:51:fe:59:da:6b:70:eb:1f:61:18:2c:da:
                    12:42:08:32:8f:5f:09:12:45:5f:94:ed:f4:4c:31:
                    bc:f9:6c:6c:33:03:68:c0:ff:32:fc:2b:40:17:c3:
                    e3:c1:2a:cc:68:d3:5d:3d:99:cc:c7:84:47:12:eb:
                    f8:83:1d:fc:80:02:01:b3:c0:00:32:94:8a:aa:3d:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3E:9D:67:A1:FC:33:AF:1D:0C:AB:FC:8D:B4:0D:58:B7:1C:6B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl

            X509v3 Authority Key Identifier:
                keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:ef:c7:5a:a8:1c:aa:88:03:49:ae:e3:70:09:3d:73:f9:
         f0:53:30:a8:0d:a8:95:b7:34:60:e5:4d:5e:d9:c0:da:3e:86:
         46:d8:2f:11:40:bc:19:5a:81:49:8f:0a:c7:5f:0b:af:08:7d:
         50:fd:7b:a0:6f:22:c6:6c:5c:8c:c7:c6:65:2a:a5:7f:60:1b:
         4f:8e:e0:85:dd:e5:3c:82:ef:01:3b:cc:48:4b:e4:ed:10:ac:
         6a:aa:d0:d0:73:98:13:bb:6f:cf:08:1e:b7:66:2f:af:48:32:
         2c:c9:a1:a8:55:ec:f2:40:dc:d7:ff:45:2c:20:1d:4c:84:10:
         0f:8b:10:84:dd:62:8b:4f:63:eb:24:46:e8:cb:d6:6d:98:49:
         2f:cf:2e:7d:18:ce:9d:f1:c5:40:64:22:04:c4:2d:6d:84:97:
         a9:39:18:ba:de:59:68:c7:d3:68:01:63:11:5f:26:56:34:b4:
         75:e1:fc:d1:db:4b:e6:0a:87:1d:06:84:51:bd:aa:cd:8e:f8:
         83:77:00:08:28:78:93:c8:16:d5:fd:5b:79:f0:e8:37:40:af:
         57:e2:b9:fd:c8:b1:55:09:06:43:74:4a:d4:19:be:49:c0:0f:
         dc:a0:df:9c:90:20:4e:b1:7a:76:9c:5f:d6:76:d2:ad:a0:03:
         da:1e:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:49 2024 by rpki-client on console-fra.rpki-client.org