Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa
File:                     4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa (raw, json)
Hash identifier:          fAK6EzyupYCMRKw3PXkHguNaNFbZjitwlT1IFWIfK4Y=
Subject key identifier:   D2:0D:BB:D4:8B:C2:04:9E:7D:BD:74:FA:3E:78:CF:EA:8F:1B:1A:DD
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F43285847E8F4CB9BCA9C4856171B5580
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     31782
IP address blocks:        192.219.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cb:9b:ca:9c:48:56:17:1b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f6fb97cb-f074-4955-87ca-11aed1d7ee72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:63:3d:b2:b2:e3:a3:f3:a5:53:8b:c8:44:
                    f8:3e:d5:5a:01:f0:a9:fb:74:d9:c3:ce:35:2d:5f:
                    d2:6f:7b:d3:6a:f4:ef:f4:9a:29:7a:f0:aa:2f:98:
                    86:2d:bb:29:5c:ab:e7:87:72:ea:f6:83:ca:e2:90:
                    ab:7e:32:9c:c8:56:6b:43:d3:2f:ec:53:e4:88:7e:
                    34:b0:4a:f6:31:ef:27:af:45:da:74:8a:23:f1:3d:
                    a4:f5:5b:d1:29:c5:b1:22:33:9b:1f:4e:db:0b:b6:
                    7e:2a:69:7c:3b:14:7d:a6:bd:98:b9:60:51:da:3d:
                    29:20:c4:14:34:f2:e4:10:9a:8a:95:52:03:f2:fb:
                    3d:3b:f2:26:ae:a4:0b:47:ae:72:a4:03:a1:e8:e1:
                    06:1d:e7:25:b0:78:b8:b0:4a:6c:ce:e3:70:b2:29:
                    35:cf:4f:b6:e3:a2:23:ce:70:9e:80:31:89:3d:b6:
                    7e:92:af:72:f8:44:44:59:a2:94:8c:5a:df:f0:1b:
                    87:b1:28:9e:42:45:c6:6d:d5:f2:e0:a7:ca:a1:b5:
                    f7:2c:be:ed:4f:65:5e:14:3e:86:d2:d4:99:98:b8:
                    3d:09:ff:71:3c:22:3f:aa:03:c3:3b:a6:f3:d7:8d:
                    da:1c:41:0f:a5:89:f4:07:ab:6f:6f:cd:8f:7f:c1:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:BB:D4:8B:C2:04:9E:7D:BD:74:FA:3E:78:CF:EA:8F:1B:1A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:10:fc:06:37:89:2b:35:1d:44:7d:f2:43:94:46:0b:e9:
         29:f1:f9:7d:2f:0c:2d:61:08:f3:8c:26:07:a4:91:c0:2a:27:
         c9:4c:e7:9e:98:be:dc:92:ee:83:47:f6:37:4f:b9:dc:f7:85:
         7a:c2:6c:20:b0:2b:96:30:3f:4d:f5:79:4d:ac:76:d6:cf:d9:
         96:48:bc:d9:f2:6f:28:5d:97:ab:d3:a1:c0:09:58:fe:9a:12:
         52:48:e8:1f:8c:82:d0:56:c6:e7:ed:b8:62:fb:5b:69:b1:9e:
         0f:2c:2d:10:92:11:76:e1:87:69:fb:05:88:67:e9:63:c5:d6:
         5a:ec:96:70:19:7c:4c:40:b1:95:79:89:67:c6:b9:b5:13:72:
         d4:e2:6c:ee:dc:9e:82:9a:8a:cb:9e:af:1b:7b:0a:0c:d0:99:
         74:ad:d5:86:75:8c:b7:f3:5b:d6:ec:ee:be:5b:cb:be:d8:63:
         dc:d8:1e:a0:d8:a0:dc:53:86:58:d9:08:81:f4:02:d4:21:3a:
         45:23:3d:a3:49:42:8a:f4:e2:70:6a:bf:e9:ff:9d:da:ec:38:
         55:8c:ad:1d:fd:fa:28:d8:c2:d9:08:04:51:ff:42:61:75:0a:
         ba:8a:33:01:d9:37:f5:51:7e:b5:49:e4:e5:c2:c5:a4:5b:d3:
         92:3a:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org