Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/6c0a5d2d-eca5-3664-9c54-4dd4b1b02bda.roa
File:                     6c0a5d2d-eca5-3664-9c54-4dd4b1b02bda.roa (raw, json)
Hash identifier:          p61PkmMD5Jao8sABs+BMr/Kv2BFxXKbOf4Q661jbBgo=
Subject key identifier:   06:D7:43:8B:50:B1:C6:98:4D:F6:86:4C:B0:C4:38:C5:FF:53:CC:D8
Certificate issuer:       /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204
Certificate serial:       010D0C9F432858478B510BABCED46D5C16BCE750
Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/6c0a5d2d-eca5-3664-9c54-4dd4b1b02bda.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     395704
IP address blocks:        192.139.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:0b:ab:ce:d4:6d:5c:16:bc:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=e2922c2b-8d3e-4ee5-a1cf-88e11300805e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:42:42:13:5c:19:46:7f:ce:2b:5f:f8:fa:
                    d3:72:c4:b4:dc:fd:6f:8e:b3:9b:c7:4e:06:d5:49:
                    1a:1e:46:cf:8e:30:dd:16:94:92:39:98:0e:b3:d4:
                    ca:27:1e:db:41:29:27:37:60:56:6e:c0:04:17:82:
                    82:c1:1b:4d:c5:a5:2f:15:fe:60:b8:ba:c2:99:ae:
                    a1:8c:72:9c:8a:dd:a5:59:6a:2b:51:31:65:34:84:
                    c1:4a:1c:c5:e2:e3:c5:72:41:18:5b:1e:32:73:50:
                    18:61:84:ef:33:50:e2:c2:9c:10:39:84:02:d0:3b:
                    2e:e3:08:3a:75:cd:bd:92:2e:e5:ca:95:ff:bf:98:
                    b8:df:f3:4b:20:75:38:98:f5:d7:75:df:71:aa:9b:
                    58:11:ba:b8:5d:cb:31:14:3a:55:b3:be:77:fe:c9:
                    66:a1:55:6a:c7:af:51:37:bb:23:63:57:f2:d1:7d:
                    f1:58:bc:66:07:62:0d:bd:6f:b0:e6:86:c7:28:3b:
                    43:bf:e1:a4:33:44:23:cb:14:b9:fe:16:60:38:ca:
                    08:5e:08:07:b1:7d:48:11:86:12:55:9f:c8:d9:83:
                    10:5b:47:2b:b5:e9:67:b9:25:85:01:06:e4:df:42:
                    8c:aa:ef:64:24:c8:53:4a:25:12:82:80:71:08:49:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:43:8B:50:B1:C6:98:4D:F6:86:4C:B0:C4:38:C5:FF:53:CC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/6c0a5d2d-eca5-3664-9c54-4dd4b1b02bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4a:1d:3a:31:f2:72:70:f5:78:36:c3:96:28:dc:34:54:72:
         53:90:0c:8c:92:29:86:21:2d:5f:c6:50:07:2b:fa:18:e6:98:
         ec:be:c8:ce:b0:ff:35:a6:c0:5e:f5:86:e2:d3:d0:cf:6e:22:
         ae:53:88:b4:f7:13:bd:3b:2a:9f:1d:74:89:c4:1b:94:5f:dd:
         6c:63:aa:34:f5:81:84:3e:e5:4e:71:e4:f3:c3:93:f3:ac:30:
         17:b2:2c:63:db:ae:be:2a:21:0b:27:c7:f6:3c:aa:6a:83:14:
         1b:05:68:2a:2b:0a:9b:dd:c1:92:27:e4:a2:bc:da:2c:04:5d:
         1b:87:21:7d:ad:57:0a:9d:18:23:88:55:cd:60:a6:99:04:06:
         0a:42:ac:8e:ff:a1:ff:87:9a:bc:a4:58:fb:38:8e:27:dc:83:
         08:44:26:67:36:b9:69:0f:cc:ce:a9:08:27:c2:99:d7:28:57:
         d2:d3:25:71:92:90:d1:9e:c5:74:35:a6:f0:db:e0:d1:4a:ce:
         7e:9d:f5:27:7c:ed:db:91:1a:3f:b3:88:57:88:98:c6:1b:7b:
         e8:1a:f1:d9:ce:84:21:b8:bf:45:44:74:c1:29:3d:f4:22:d6:
         f5:22:d0:1c:c4:2c:3b:4a:e8:3e:36:b0:14:e7:a2:91:cf:3b:
         fc:67:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:12 2024 by rpki-client on console-fra.rpki-client.org