Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa
File:                     ddb3fe35-de01-37de-97b9-af36a60b3a63.roa (raw, json)
Hash identifier:          1BnSKWQ5Y6atFg1Aeyw4Msr1n0qXisQxe2V7D+NHs2Y=
Subject key identifier:   B4:C2:36:10:B7:0D:BF:71:07:D9:5A:9F:D4:C4:D5:34:EF:7E:17:9B
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F432858474A8BDD2B8C65C24B6B0C4240
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa
Signing time:             Sat 21 Sep 2024 20:11:35 +0000
ROA not before:           Sat 21 Sep 2024 20:11:35 +0000
ROA not after:            Fri 20 Dec 2024 21:11:35 +0000
asID:                     14618
IP address blocks:        192.122.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4a:8b:dd:2b:8c:65:c2:4b:6b:0c:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: Sep 21 20:11:35 2024 GMT
            Not After : Dec 20 21:11:35 2024 GMT
        Subject: CN=9fb98fe2-a741-4372-b24d-ea9f4619eb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:0b:cb:ce:53:4f:6f:f5:ae:3e:c2:17:ec:
                    37:7d:c0:13:a2:ee:e3:0e:df:0b:a6:f7:e5:3e:a4:
                    ba:f8:75:f5:db:ad:ac:0a:8b:db:3a:f7:af:b4:5d:
                    99:e8:2e:44:8e:3e:34:9e:83:01:01:84:c1:f2:5f:
                    33:ad:23:fc:b2:d3:26:62:9a:60:e4:b5:54:f3:c7:
                    d3:bc:75:b8:d5:1c:ac:7f:1b:ef:87:7d:8b:e0:d1:
                    a1:e0:e1:fb:95:f8:2e:4e:92:f1:fc:20:58:e5:0f:
                    3b:1b:a7:f5:95:74:fe:33:a1:dc:d0:b3:30:d0:7c:
                    de:54:de:63:f9:3b:11:c1:5c:fb:52:52:1b:56:a8:
                    71:29:bf:e0:ed:bb:25:12:0c:1f:a3:61:b4:a1:dc:
                    6a:1b:6f:00:02:ff:31:e8:df:8e:5f:a2:dc:fc:91:
                    9e:79:08:55:97:aa:7d:69:bb:4f:4e:a8:3f:98:ed:
                    e8:e4:ef:d3:4d:0a:c8:10:79:76:77:1a:31:bd:fe:
                    b5:ec:83:56:23:24:29:c8:a8:7f:04:e9:b7:db:24:
                    58:99:4e:7d:92:3e:fa:59:7f:0a:e7:fa:5e:b4:7b:
                    c4:a7:22:10:6f:02:f6:cf:62:83:38:74:2c:10:1b:
                    e9:86:e9:c9:98:f2:1c:f6:8f:fc:9d:ac:22:90:35:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:36:10:B7:0D:BF:71:07:D9:5A:9F:D4:C4:D5:34:EF:7E:17:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:70:45:2f:72:75:0c:ae:e8:b4:81:30:83:91:82:4c:ad:
         f2:c9:4a:7d:b8:0e:0a:19:36:e2:1e:42:02:22:de:80:59:d6:
         48:62:5f:40:c2:c0:9d:fd:d0:84:f2:93:ba:0a:7a:45:d8:25:
         94:7f:da:e3:2c:24:98:d4:b3:d4:37:42:93:29:25:56:15:e8:
         f2:02:bd:65:78:33:df:de:5e:3e:a3:73:af:6f:64:73:58:8b:
         f6:73:f7:64:4f:4e:2e:41:51:6b:c7:2d:c7:34:42:4c:91:4f:
         e1:91:75:94:3d:12:a3:90:7a:ec:c1:5b:c7:0f:0f:11:16:03:
         3d:b4:5b:af:c5:44:7c:d7:f0:7d:1c:59:8f:24:67:36:f7:2a:
         cb:f0:8b:ea:9f:77:fd:6d:a8:74:8d:2f:15:1a:78:89:7d:5a:
         4f:2d:41:b8:af:ad:bd:8f:52:14:49:83:c9:da:40:b6:87:9d:
         fe:33:4e:4a:a7:b8:8a:35:0c:54:cc:be:c0:92:53:b5:a9:37:
         09:e4:4a:96:ef:9f:9a:5d:0a:ba:8d:2b:b6:ae:a8:53:80:b5:
         1b:c6:0a:b1:85:df:7a:ed:f6:27:2a:f8:19:a4:92:67:c6:0e:
         18:ca:ac:71:65:aa:09:95:3b:41:c6:56:16:60:5e:dc:13:a7:
         15:07:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org