Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c50005ce-0b71-3fd3-a704-aefab2c39235.roa
File:                     c50005ce-0b71-3fd3-a704-aefab2c39235.roa (raw, json)
Hash identifier:          gU2WaCrwRNLIUbw5YZTcMb9469RYbD5iXhBgIf/i/wM=
Subject key identifier:   BE:BC:1B:BC:DD:9B:B7:BC:DE:D5:AB:56:03:0C:19:DA:70:C3:4B:3D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584792C8A7E206D2E1711245D080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c50005ce-0b71-3fd3-a704-aefab2c39235.roa
Signing time:             Thu 17 Oct 2024 17:12:16 +0000
ROA not before:           Thu 17 Oct 2024 17:12:16 +0000
ROA not after:            Wed 15 Jan 2025 18:12:16 +0000
asID:                     9009
IP address blocks:        168.93.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:c8:a7:e2:06:d2:e1:71:12:45:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 17 17:12:16 2024 GMT
            Not After : Jan 15 18:12:16 2025 GMT
        Subject: CN=5ea29702-86ad-4aff-bdc7-001db12324ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:c9:6e:f2:55:25:23:b0:12:60:3d:d0:bd:
                    b5:1d:29:c7:9f:62:bd:e7:eb:49:78:86:ba:43:a7:
                    b3:b0:47:1a:6a:eb:ba:9d:3d:44:b7:30:40:ce:30:
                    fe:f9:f3:9f:52:59:bd:99:20:c2:f4:ad:cd:f5:7e:
                    04:a8:da:db:51:dd:54:f5:4d:aa:dc:c2:07:32:42:
                    3e:a6:84:e7:85:71:08:a3:48:88:6f:ba:1a:92:f7:
                    6f:b2:29:0d:4c:ac:24:9d:42:ec:da:b3:78:90:45:
                    e9:69:ab:3f:44:e7:e4:8e:25:fc:e1:b0:22:f5:e5:
                    8c:00:7c:30:3f:e1:bd:a1:7d:c4:20:fc:a3:2e:10:
                    88:ff:54:3b:98:30:3e:b9:a2:c9:1a:dc:38:ef:00:
                    ce:60:c1:a0:97:6b:18:fa:d3:4f:40:b5:9e:29:06:
                    cb:d2:e8:0a:58:fc:93:45:c1:dc:f2:0c:26:ad:4d:
                    a0:19:e1:d3:58:53:94:99:a3:36:e4:ea:dd:77:cf:
                    d3:e4:57:9e:2d:5c:15:20:83:a2:8e:79:3d:ef:5f:
                    46:f0:78:6d:c4:e5:c9:1a:90:fa:0e:fe:8e:ec:f7:
                    71:2d:95:04:36:fc:74:c5:ab:74:05:2a:57:72:46:
                    f1:b9:f5:54:be:61:e4:9a:64:9e:f4:c7:18:37:8a:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:1B:BC:DD:9B:B7:BC:DE:D5:AB:56:03:0C:19:DA:70:C3:4B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c50005ce-0b71-3fd3-a704-aefab2c39235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:ac:32:eb:2b:2e:b9:22:00:db:ba:e2:a9:79:cd:a2:b1:
         2e:f4:3a:b3:b3:1f:d7:93:b2:2a:0d:98:51:32:f5:a9:54:3f:
         18:01:c7:ab:fc:69:97:68:7e:24:9b:d8:d4:27:79:62:3b:88:
         82:86:3a:f0:6a:f9:5b:c5:92:4d:6d:cc:2d:c8:6e:1f:03:c7:
         d4:40:0b:9d:b1:0a:8d:44:01:68:b1:47:43:df:09:aa:3c:07:
         d7:f7:bc:61:db:d9:98:3f:76:3b:40:8d:9f:13:fe:54:ae:bf:
         36:9c:a1:18:5a:ca:b3:49:09:4e:32:b6:f2:af:94:05:96:3b:
         b4:84:3e:93:9f:da:17:8f:ff:b3:36:4e:49:37:b1:86:2d:56:
         85:a1:b1:02:28:b9:82:17:fa:b4:3d:ba:75:79:18:b4:17:16:
         d6:b7:e7:2c:1c:06:ad:2e:ad:c2:12:6f:61:f0:30:75:c2:b1:
         8e:86:da:c2:71:5e:28:9a:43:a6:8d:47:b2:79:8b:c8:ec:67:
         a6:2b:f0:22:32:84:0a:ba:1a:ac:48:f1:73:39:a5:c7:43:f9:
         59:b3:a7:82:54:2d:36:fb:07:9e:f9:6f:e2:17:fc:58:27:b3:
         ae:2f:20:77:93:ca:1a:07:0e:55:83:e8:20:6c:ef:5f:d8:76:
         e6:70:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:57 2024 by rpki-client on console-fra.rpki-client.org