Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/56377c63-a02d-3a94-90df-828a6d8ec40b.roa
File:                     56377c63-a02d-3a94-90df-828a6d8ec40b.roa (raw, json)
Hash identifier:          ksLlaVG55RlCteJ6mi/Voyqu/L3C9BJOj89rBHawQN8=
Subject key identifier:   35:57:F0:F0:B3:99:C6:F7:68:78:1A:1E:74:E3:A6:E2:C7:54:49:A9
Certificate issuer:       /CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62
Certificate serial:       010D0C9F43285847B961725A1116BE53B8BC8880
Authority key identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/56377c63-a02d-3a94-90df-828a6d8ec40b.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     1011
IP address blocks:        204.10.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:72:5a:11:16:be:53:b8:bc:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=a147cc52-1ebb-4e4f-987e-3361fb35f9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:10:a5:a9:1c:db:9b:d0:fb:d5:25:6e:38:
                    62:f6:22:71:91:a5:54:c1:b7:4f:8c:75:34:9e:e3:
                    12:42:6f:ef:0a:12:f6:84:a9:57:c2:f9:7c:b6:32:
                    62:68:d7:31:36:3f:f3:a0:e3:35:0d:02:07:60:6f:
                    57:e6:42:a3:06:47:f0:60:b3:c5:50:8b:a1:b5:c8:
                    ee:59:3e:25:e9:73:4a:59:95:ca:7a:6c:f6:07:d7:
                    e0:f5:84:27:3a:fd:3c:35:8b:f0:49:7c:e7:d2:d7:
                    ec:4e:54:27:47:c0:7f:ff:97:47:92:79:16:ba:b9:
                    99:02:8c:27:5a:61:59:9e:64:55:5d:6e:92:b6:c1:
                    09:64:a9:f2:56:62:bf:9f:7c:9a:74:7c:4e:39:d0:
                    a3:3d:b6:c3:96:4a:b5:bf:0d:ec:4c:f1:1c:bb:ae:
                    11:5d:6b:a6:31:a4:49:15:0f:26:b4:e1:f0:e2:6c:
                    56:c7:a5:c9:1f:d3:bc:ae:68:90:df:81:a0:39:a9:
                    79:f3:50:51:3f:20:af:17:71:c2:ce:6c:da:51:47:
                    be:7f:79:76:49:82:8f:2d:9f:6c:4b:bd:38:c9:f1:
                    0d:07:c4:a1:75:c4:0b:0b:8e:56:9d:c7:94:56:fe:
                    5b:e6:41:5c:20:30:5f:0d:d5:81:89:4a:6a:48:96:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:57:F0:F0:B3:99:C6:F7:68:78:1A:1E:74:E3:A6:E2:C7:54:49:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/56377c63-a02d-3a94-90df-828a6d8ec40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.crl

            X509v3 Authority Key Identifier:
                keyid:F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:2b:e4:23:17:e3:4e:fc:71:11:ee:d9:4c:d5:43:61:65:
         30:22:e2:10:b4:27:3a:fe:be:26:d0:47:59:8c:58:3c:2e:93:
         9a:82:24:7f:16:31:5f:27:ef:b9:c5:a7:bf:ed:e2:7c:23:ea:
         19:45:cf:9b:53:e0:1f:c3:31:8f:94:3c:72:f3:c7:bc:3c:1e:
         01:07:62:cd:5e:bb:cb:10:ae:77:bc:9e:a7:b6:1a:ce:67:88:
         d7:ad:6d:e3:cb:b6:bc:be:52:1f:0a:2e:ff:3d:ac:a0:77:56:
         4a:fc:04:14:30:4d:f7:c4:8f:fc:6d:3c:d9:dd:68:da:13:e1:
         bb:9c:79:3e:b5:cd:1d:ad:2c:ec:0c:d5:97:aa:c7:a8:be:b4:
         a8:a4:1a:24:bc:5e:67:7c:40:72:cc:5d:c6:ba:6b:e7:a4:51:
         95:74:69:4f:f3:4f:3b:01:91:02:1e:7f:a7:92:ae:f9:5f:62:
         5c:76:f3:ad:55:ee:77:e5:32:e7:76:d2:75:7e:bf:06:92:cb:
         63:d7:83:da:dc:ef:fa:39:39:7c:73:b2:b1:0a:da:6a:22:34:
         92:5e:58:55:82:6c:d3:d1:86:6c:f4:3c:44:93:4a:83:49:7b:
         45:d7:d5:01:12:6b:00:66:d0:c8:c6:ea:94:66:08:85:03:d1:
         54:d6:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:21 2024 by rpki-client on console-fra.rpki-client.org