Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa
File:                     dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa (raw, json)
Hash identifier:          J7XZmfrfEs0576rTMZJcBObUzYGCz2LWzPpj6g2g3Ck=
Subject key identifier:   CE:27:A8:5C:70:0B:57:C7:8D:EB:3C:7E:B4:41:0C:CB:BD:7E:49:A9
Certificate issuer:       /CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf
Certificate serial:       010D0C9F4328584784567D0C6EDBBBCE86B11A00
Authority key identifier: 17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     63180
IP address blocks:        192.55.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7d:0c:6e:db:bb:ce:86:b1:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=9ae4400b-2590-47da-8745-e68c1bf4c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:c8:a8:72:f8:d2:f5:b3:ec:e5:aa:cd:25:
                    ef:83:c8:33:62:0f:7a:a0:7a:95:7f:6f:36:cf:be:
                    d3:ab:aa:73:57:62:60:f2:27:60:54:b4:e2:f1:03:
                    3e:aa:70:38:36:72:aa:03:5c:43:76:f7:0a:0c:e2:
                    c0:a2:1c:ce:3c:41:43:cd:11:89:96:f1:08:8e:46:
                    c4:12:32:fd:16:51:3f:35:43:24:69:dd:a3:29:02:
                    17:2e:ef:4c:91:66:15:31:ac:ee:45:93:89:4f:a0:
                    2c:29:2d:2a:be:2c:83:cf:fe:34:0c:54:f9:bd:ea:
                    55:0a:25:81:49:35:fc:2f:2e:54:0d:9a:4c:44:8d:
                    bb:ad:da:89:3f:5e:eb:99:51:6e:ad:97:9d:43:a4:
                    9f:6b:0e:32:48:c6:7a:86:8a:c4:92:00:57:9b:86:
                    31:b4:44:98:81:a5:25:66:49:9b:15:43:4f:19:0f:
                    ee:1c:c1:32:bf:65:7e:7f:59:bf:fe:90:94:dd:31:
                    13:7f:0d:89:a1:65:fa:8e:0e:5c:e5:cc:e7:4d:b5:
                    a7:6b:6f:77:2f:4b:02:36:0b:eb:62:c5:8e:7e:cd:
                    f3:88:27:b5:3b:4b:3b:64:57:b9:d9:4c:cc:c3:13:
                    86:de:d0:2d:8e:f4:64:fc:ba:70:09:c6:be:72:c9:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:A8:5C:70:0B:57:C7:8D:EB:3C:7E:B4:41:0C:CB:BD:7E:49:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl

            X509v3 Authority Key Identifier:
                keyid:17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:52:a3:10:39:7b:e7:84:f2:7c:88:3f:78:29:a6:a5:96:
         9d:0a:30:71:9b:fb:20:10:da:de:54:f7:78:e2:e1:4c:f2:3e:
         7a:6b:10:44:6a:bb:4c:e4:e7:9f:9b:58:e6:d9:cb:12:c2:27:
         1e:d8:fb:ba:5f:f7:5b:17:1d:47:7d:e6:d9:de:7b:17:ee:fc:
         aa:10:19:dc:db:2c:60:d3:20:25:fc:84:2d:ac:0e:f7:7d:9b:
         c3:93:0f:1d:3e:f9:30:31:1d:16:db:e9:b9:6e:79:da:f0:e2:
         ff:24:61:38:e8:76:49:ee:b5:46:51:5b:cb:a1:39:9b:e2:a1:
         82:61:7b:7a:3a:e3:2d:95:3b:70:0c:77:f7:eb:d7:cf:b0:a7:
         73:0b:9e:f0:61:42:3a:78:a5:34:76:81:c1:5f:1f:8c:6a:e0:
         a8:ba:92:f9:d8:f5:9e:ba:37:cc:12:b2:4c:f3:7e:0a:3b:c4:
         23:6f:3b:30:a1:3b:69:2c:59:e8:f3:c3:9d:bc:1d:ae:c0:03:
         27:41:94:9b:34:9f:d4:d1:f0:18:5f:8a:a5:a7:1b:02:95:95:
         af:70:73:1f:95:ee:1c:6a:1d:73:3b:b2:54:0a:2d:f1:ec:08:
         f5:55:39:16:bb:f0:46:30:e7:ab:a7:bf:15:5a:2f:20:a3:33:
         7e:39:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org