Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa
File:                     9c13e2d7-778a-3379-b087-3d35d74d8291.roa (raw, json)
Hash identifier:          jTIHnuRXFx3OV29Sgnm/DZ0v+pa5dxBcLYwH5lTQYdY=
Subject key identifier:   AB:0C:19:AB:00:5A:AA:E7:4E:41:A3:59:9E:CF:1F:E2:87:2D:9B:96
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858476C9DB1BC967F2D4FDBCCFDC0
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     2013
IP address blocks:        192.80.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b1:bc:96:7f:2d:4f:db:cc:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=fbef6bdc-d187-48c3-ae09-9f90cfbcd92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:09:09:56:72:8c:59:ce:20:2a:ee:07:b2:
                    a6:3c:21:27:0f:e4:63:13:ad:5b:58:e0:30:6f:e0:
                    a8:f6:b3:96:2f:89:2a:01:92:f2:44:bd:84:85:84:
                    ce:72:07:45:6a:19:66:38:0f:50:b9:98:04:cd:0e:
                    a9:b1:e8:a2:15:7d:31:99:33:45:72:5c:be:8c:08:
                    ef:6f:d4:d5:e6:18:f5:d6:6a:16:3c:28:5d:f7:77:
                    7e:13:43:00:81:5a:f4:53:9a:98:ef:2a:93:09:a1:
                    b8:24:ef:1c:42:03:04:fc:cc:cd:03:93:8a:f9:58:
                    78:37:00:fa:db:ea:c2:23:f0:0b:fd:bf:24:81:2a:
                    ca:96:e2:f0:33:96:53:16:11:af:12:61:4a:40:43:
                    fa:74:9f:40:c0:c8:2a:c2:4e:1c:b6:56:f1:f2:4b:
                    5b:00:51:81:2c:07:74:30:2b:b8:cf:cb:a7:6f:2e:
                    20:e5:9b:16:e4:59:d5:56:6a:e5:8f:9d:18:4b:b4:
                    e8:a5:a9:29:3e:79:61:97:8f:45:7a:e5:c6:7a:81:
                    0e:cf:6c:29:fd:ec:20:e1:c6:c0:c0:e7:a9:89:96:
                    78:1e:d7:d7:c6:30:f2:a0:b4:8e:5e:16:27:9f:e9:
                    ff:07:93:d3:10:e7:d0:b7:7d:a6:7d:23:bd:19:79:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:19:AB:00:5A:AA:E7:4E:41:A3:59:9E:CF:1F:E2:87:2D:9B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:60:9f:bc:d0:b0:1d:b6:2c:ac:4a:10:da:20:5d:fa:00:2b:
         d6:ca:8d:03:41:aa:f5:63:e4:28:ea:41:5f:36:07:c6:fe:29:
         06:0d:29:bb:2a:f3:fc:e0:eb:4a:62:ca:79:01:3c:fc:26:cd:
         b7:12:ac:49:ac:51:de:b2:16:2a:d9:9c:13:ca:a4:8a:99:6d:
         d5:6f:d9:0c:ac:7c:56:fc:26:90:4c:4a:d9:6a:21:bd:af:7c:
         4e:77:4b:99:ae:51:b4:1b:df:bb:d0:72:cf:cd:3d:12:7f:75:
         a6:10:5d:41:f1:25:52:d6:aa:7f:d2:8b:f7:36:b3:e2:f1:e5:
         98:c4:ff:2a:a9:56:be:49:31:39:c4:e8:36:00:6a:ad:43:e2:
         c3:4c:41:72:4e:2e:80:7f:bd:02:80:cb:4a:45:4b:26:71:c5:
         9b:6c:1a:9c:51:2a:b5:1b:eb:89:c7:36:29:b3:d2:27:41:b8:
         76:fc:ef:7d:70:8b:40:68:50:a8:72:9a:54:26:72:4f:b2:b0:
         78:af:22:23:df:2a:76:ca:f6:a0:55:7b:ea:00:b1:f9:f5:22:
         a0:5b:37:2c:29:8e:d7:6e:49:9f:58:0a:9c:71:78:38:bb:28:
         0f:9b:3d:de:56:03:58:f2:b3:bf:e8:b5:24:0e:a7:c9:d8:3b:
         01:b9:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org