Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
File:                     8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa (raw, json)
Hash identifier:          Su/otJ54tkLaG+Xt/bVVlLh06xfO0ubpkdht7z53ToQ=
Subject key identifier:   9F:1E:DC:B1:86:F4:AB:51:6E:48:A6:5B:1B:BC:E1:61:AE:67:73:19
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858484C10207E7822200900152900
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        192.80.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:20:7e:78:22:20:09:00:15:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0e97a7d5-fcec-4a1b-bce8-394cd92c47ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:09:ca:eb:ba:ac:46:34:42:61:b0:b9:3d:
                    6b:bc:17:5c:63:05:a2:ea:ef:66:88:1d:ba:c1:cc:
                    d9:8a:d1:25:83:cf:0e:57:92:c8:a4:91:01:15:50:
                    ce:ea:52:33:0e:8f:66:56:ed:1d:d1:0d:d3:5a:21:
                    0f:1b:5d:c8:4a:2f:4b:6e:39:d3:ba:22:55:a0:3d:
                    94:08:b1:2c:2e:34:2e:0a:1b:a5:d5:02:53:ce:fc:
                    cd:40:df:77:e3:ba:69:15:72:75:a2:95:50:e2:07:
                    9c:be:19:06:6b:34:6f:48:7e:da:85:69:4b:07:d1:
                    26:c7:a9:34:fa:1e:52:eb:0a:ee:ea:d3:ca:f2:f8:
                    c5:60:fe:06:59:02:7b:a7:81:44:db:15:b8:38:bb:
                    14:4e:3b:d9:f3:0d:6c:09:85:57:3c:eb:5a:88:87:
                    f0:1f:2b:35:be:47:24:38:45:dc:bb:e2:c0:26:15:
                    aa:41:fa:d6:07:c1:f9:85:28:99:7f:a5:1d:8e:1b:
                    16:59:70:57:a8:d1:d0:99:ad:27:7e:fd:f4:40:93:
                    29:b5:02:b5:dd:04:7b:6a:ff:db:07:19:c5:1a:7b:
                    db:84:aa:d5:ee:3e:02:68:a9:fe:4b:2e:9c:2c:3b:
                    e5:d8:bd:ec:37:78:eb:fd:05:06:12:14:4c:1a:a9:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:DC:B1:86:F4:AB:51:6E:48:A6:5B:1B:BC:E1:61:AE:67:73:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:27:3f:2a:58:eb:d4:86:81:b4:29:87:46:68:2c:57:f1:
         44:87:d4:26:ef:17:36:40:d9:0f:63:2c:f0:48:f9:60:56:c1:
         19:72:56:05:06:80:fc:ee:63:c8:06:dd:33:2c:e4:51:8e:62:
         10:9a:91:5f:e5:2b:29:36:1c:cf:e8:d9:3a:8b:10:9d:ae:39:
         32:3b:2a:d2:49:39:18:b0:c3:0d:09:7a:0c:38:48:21:de:fe:
         68:41:e0:e6:1c:91:99:ce:a2:8f:c2:28:5b:03:94:6b:cc:42:
         ee:7f:25:f8:24:25:10:d1:83:e0:16:d1:81:90:27:5f:e2:ae:
         82:60:5b:7a:3f:3c:44:48:5b:95:8a:b4:58:a3:59:71:74:d2:
         69:fb:d0:d9:c1:f5:8d:07:dc:0f:12:ad:a4:44:9a:5f:5b:fc:
         a7:81:b0:a1:18:a1:03:61:cc:38:23:d8:23:b3:47:b8:49:81:
         49:7a:7e:4d:b2:5a:50:c9:24:15:34:77:67:bc:4d:f8:43:ac:
         31:5d:c7:2e:a5:7b:12:76:32:30:2c:4c:60:25:d3:34:fe:87:
         d7:43:22:13:67:d4:77:e8:31:f8:c4:90:1a:b6:b9:85:41:aa:
         39:fd:2b:0a:2a:80:51:20:40:70:9a:b2:d9:05:0e:42:f4:4c:
         26:37:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:53 2025 by rpki-client