Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa
File:                     2c6c7425-b400-3f56-9d38-a5ab6a978294.roa (raw, json)
Hash identifier:          Hwm/fMieLF0poY5dkBk/d3zhX2j0aWNPj2JL0d4ECFU=
Subject key identifier:   76:D1:56:24:32:22:1B:AE:D9:05:1A:55:C3:16:DE:47:06:11:5F:16
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F432858475EA6264AF43D129934C49CC7
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     35280
IP address blocks:        192.243.85.0/24 maxlen: 24
                          192.243.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:26:4a:f4:3d:12:99:34:c4:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=bed79507-b465-4e04-a163-d6c1743edb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:e0:32:8e:c4:87:86:7e:41:db:b2:4e:47:
                    1a:27:6b:e9:55:ba:df:41:52:36:03:88:9f:37:4f:
                    40:79:f8:24:57:aa:7e:d5:f3:b6:2f:ac:35:27:ed:
                    b9:44:fa:bc:85:b3:45:89:54:bd:be:02:e5:50:59:
                    92:1f:e4:29:d0:fd:ec:d8:b9:ab:39:9c:7a:e4:e4:
                    7c:83:e0:1f:55:49:e8:3b:fe:d7:c9:77:02:3e:8f:
                    c7:0a:7e:36:48:91:64:4a:88:f0:a3:74:57:95:e6:
                    7f:3b:75:17:ed:98:ed:df:27:48:17:d0:f6:9a:61:
                    91:08:bb:e8:b3:fc:ed:a0:42:09:22:f3:84:46:65:
                    49:66:b8:cd:c7:7d:18:c3:b5:42:89:6d:80:22:ee:
                    d6:ee:17:55:91:90:c7:96:17:61:6e:5b:4b:83:11:
                    5b:9e:fb:de:45:80:67:b7:ec:fa:11:05:9e:25:78:
                    a2:08:58:cb:0a:ba:c7:91:e4:72:98:c1:b6:1d:80:
                    09:b7:a1:3a:8d:dd:67:ee:4b:01:39:c0:99:c1:f0:
                    28:39:ac:ad:1f:2d:bf:78:8c:77:c8:44:dd:a0:f7:
                    ef:e9:04:ba:ac:2c:ac:9f:77:d1:26:7c:9d:f8:9c:
                    a2:01:07:7a:09:eb:66:13:f1:7b:3a:0b:83:67:cc:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D1:56:24:32:22:1B:AE:D9:05:1A:55:C3:16:DE:47:06:11:5F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.85.0/24
                  192.243.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:d3:75:93:54:05:ff:57:e9:77:5d:9f:fe:a5:53:3b:94:
         e3:c1:e0:5f:39:21:e6:69:60:7c:46:60:36:72:92:3a:ee:21:
         a0:8a:46:a1:13:2c:d5:6a:50:c6:47:cc:f2:8f:e4:f0:2f:68:
         6f:47:e7:eb:b9:2d:8f:1b:ca:a0:4a:98:28:36:6d:c0:83:b8:
         51:e0:59:55:90:a7:ed:06:d1:96:12:f6:38:71:ee:6b:6b:2e:
         5d:08:81:1a:e7:38:58:ea:00:88:64:36:ad:d8:c8:c1:97:90:
         06:b2:48:8a:e4:f9:7f:2a:30:ce:fd:81:74:0c:6f:57:0a:88:
         a1:60:0a:ac:a6:a4:5d:dd:99:ad:ac:4f:c4:5a:33:fa:f0:b2:
         87:36:3b:c3:cc:cf:1d:69:d7:53:a4:fe:47:86:31:9e:f8:45:
         31:6d:c4:10:47:81:ab:11:e8:67:16:b0:a2:d7:ee:4d:ec:b3:
         0a:23:d2:fd:38:b4:05:f7:21:c1:e4:66:76:f2:5e:43:c4:ee:
         6e:64:ef:88:c5:fd:43:e2:08:e7:ec:6d:27:91:89:4e:81:3c:
         15:4d:40:41:fa:3e:5a:2e:3a:29:9f:51:01:f7:3f:d3:47:9b:
         be:ba:46:da:10:64:53:ff:e8:ff:ff:eb:d3:f1:60:6e:3a:3f:
         d9:67:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org