Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa
File:                     613e7045-c47e-3beb-a285-01f6a9043a46.roa (raw, json)
Hash identifier:          9vTRsctzQHiSDp4UFjGlJzoupP71qM+Umnc29XOvndY=
Subject key identifier:   E4:E3:33:4B:72:8C:3E:E8:D0:83:37:7D:AC:3C:2E:E5:28:DA:F1:76
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F43285847CD09F597A2074F0292EC9580
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     397735
IP address blocks:        198.200.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f5:97:a2:07:4f:02:92:ec:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=2c7bd09f-59b8-4b42-a972-8da45fc52eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:df:c0:fa:06:9d:c9:a3:b3:2b:d6:11:84:
                    0d:06:09:70:43:70:43:32:63:7a:29:81:80:01:15:
                    01:c9:74:6a:35:e2:61:e8:64:0e:fa:28:db:6d:c6:
                    c8:0d:28:87:73:2e:47:03:e2:1d:52:54:f8:37:2b:
                    f6:49:03:f5:65:30:7b:89:3a:e1:81:c6:58:3f:31:
                    46:c7:b7:14:90:9f:a9:83:b9:0d:3c:79:26:08:0c:
                    94:9d:f2:ca:5f:54:03:df:d4:d2:4f:36:cf:f5:c4:
                    2f:6c:ae:5c:36:b8:ba:cc:17:47:5e:f3:75:25:8c:
                    2e:af:09:5b:ef:15:b5:b1:e1:23:41:fa:45:52:2d:
                    2e:da:2c:1a:81:e6:84:25:b1:4d:b5:cd:00:c4:4a:
                    38:e8:7d:fe:a4:f1:33:ab:22:aa:76:a3:ab:9a:4d:
                    99:c4:1d:2c:6b:a0:05:69:64:9d:4d:bf:f6:b9:00:
                    80:2f:97:49:e6:3f:7e:78:75:6b:cd:da:50:48:1b:
                    79:a2:10:d8:34:09:56:7a:ca:b4:c8:f4:69:01:f5:
                    8e:71:54:3c:a5:e6:e0:c5:c4:26:39:34:46:cf:95:
                    58:2b:a2:c9:02:6c:e5:d1:4d:7b:f2:0b:3f:ae:50:
                    23:4d:f0:68:cc:26:08:38:83:9c:a0:c6:d4:13:28:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E3:33:4B:72:8C:3E:E8:D0:83:37:7D:AC:3C:2E:E5:28:DA:F1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/613e7045-c47e-3beb-a285-01f6a9043a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:f0:7f:bb:97:d0:83:b5:b3:8a:b8:de:22:64:8f:fb:42:
         7e:52:d4:0e:91:ac:2f:8d:bb:56:57:63:82:5c:5b:74:7e:58:
         39:ae:16:64:b7:d8:f2:b0:8e:5c:5f:d4:96:0b:71:2e:4e:da:
         55:60:3d:f1:33:33:d7:ff:cc:1e:c4:cf:7a:e5:2d:e0:78:39:
         87:91:24:c7:1d:14:4b:84:42:c6:8e:b5:15:d5:ea:97:7d:10:
         e7:d8:46:41:12:e7:8a:87:93:08:4e:f7:3e:bd:36:91:26:4a:
         59:45:90:d3:76:0e:01:3f:19:07:59:55:79:11:45:e2:a5:84:
         1f:fb:ee:9b:11:a8:70:1b:3a:ce:5a:2c:94:88:0d:ff:18:d8:
         82:ce:54:68:25:1c:22:4e:a3:6f:5c:f7:e8:03:8a:72:24:ab:
         9a:ac:30:62:d3:1a:18:5f:c0:67:08:3c:c5:0a:dd:8b:7e:da:
         18:3b:30:43:7f:64:8b:4a:7a:3f:b5:da:56:bd:4c:ff:55:50:
         b4:65:a9:4e:e2:04:4b:e9:1a:25:01:74:49:d6:19:ca:9c:22:
         56:ad:a1:16:7b:09:7b:bd:3f:88:35:6a:85:9a:22:bd:0b:fb:
         ca:54:f0:ab:7e:c4:25:13:1f:c3:4e:1c:b2:1a:5d:96:46:fb:
         77:2d:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org