Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa
File:                     284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa (raw, json)
Hash identifier:          B0xaJm76d+B3fQN+YGRBu1i9mG65KudWaOE3eYwX/tk=
Subject key identifier:   DF:98:EC:68:F4:1E:5C:20:CE:C8:20:8A:12:1F:C0:52:C6:CD:F6:6E
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F43285847B696BE128C4036573D288E40
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     397976
IP address blocks:        195.85.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:be:12:8c:40:36:57:3d:28:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=2cb3ebb8-acad-4b8b-abee-f85c2248aa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:f8:06:bb:ab:d9:4d:1f:8c:33:86:9c:1e:
                    87:24:d5:01:58:5b:82:6e:55:7c:75:32:e1:0c:fb:
                    8d:03:6d:91:0b:e8:42:f1:94:c5:c4:85:d4:4e:05:
                    bb:43:7d:f7:14:99:85:d4:90:fe:86:8b:8a:37:1b:
                    0e:e9:25:7c:dc:72:6c:19:e8:23:53:ee:c8:59:7e:
                    78:6d:fb:76:6a:5b:81:7c:6d:d7:ee:1c:66:ea:0f:
                    c8:f7:c0:3a:ba:b2:77:7b:97:4b:21:ec:31:a1:13:
                    73:0d:ae:49:dd:1a:34:91:e2:f7:97:47:69:e0:a6:
                    21:ff:66:2f:bb:5f:0b:d5:0c:05:cc:86:7a:68:59:
                    b9:4f:8e:94:85:a3:b3:64:06:9d:1c:91:94:0d:67:
                    ba:4b:18:33:86:47:db:7d:b8:35:9e:11:47:9b:ad:
                    0d:fc:a8:aa:ed:0b:f8:fb:b0:58:4a:1d:6b:78:21:
                    8e:3d:31:e4:15:d2:20:e0:1b:f5:ff:6e:72:93:6e:
                    fb:ca:bc:01:ea:79:6f:79:7a:74:84:ac:3f:e7:82:
                    b9:0e:4a:f0:b2:36:58:95:b5:d4:6c:c3:2d:88:79:
                    62:7c:f6:aa:d4:7d:ba:21:73:4e:42:7e:31:28:ad:
                    86:40:66:fe:7e:22:8e:60:cd:f4:e8:68:e1:df:79:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:EC:68:F4:1E:5C:20:CE:C8:20:8A:12:1F:C0:52:C6:CD:F6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:68:20:db:3e:65:56:f3:e8:61:e0:ac:1a:64:55:e9:6e:f4:
         da:7a:4b:48:d3:6a:c4:44:b9:70:7e:21:0a:4e:a9:f2:d1:db:
         ac:5b:38:f5:57:36:2e:56:3a:1c:17:55:04:b3:6c:37:27:24:
         fd:d5:35:60:eb:d3:0a:e7:b9:10:ba:39:1d:75:05:dc:2f:85:
         3b:f7:40:c8:ae:30:f8:0a:82:bc:10:77:cc:b3:3a:b4:17:a0:
         53:f1:f5:ab:05:f2:27:26:aa:cd:05:65:8e:47:c0:75:ee:c3:
         6c:81:88:a9:cc:b0:b3:bf:85:ee:96:d3:6b:8c:61:57:4e:69:
         47:02:02:1a:3b:2a:ac:57:c6:24:72:32:fa:2e:f0:51:5a:7a:
         e3:07:7e:c2:09:c6:81:70:ee:64:4a:1e:be:7e:c1:a9:d7:ed:
         e5:87:11:01:93:be:20:c9:c5:1d:bd:d8:30:bd:22:b5:80:53:
         62:0e:12:0a:cf:ec:20:01:63:07:05:da:e6:5c:33:db:f5:c4:
         6c:2b:5d:76:f9:ff:9f:6b:e5:4a:b2:20:1f:5f:0d:e7:44:97:
         8f:17:a9:49:46:95:7e:ab:77:b4:a7:26:a6:4a:60:4a:cc:9e:
         b4:44:5c:de:a0:e8:ab:48:a6:44:2c:0c:da:0a:a7:4f:87:a0:
         32:eb:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org