Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
File:                     8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (raw, json)
Hash identifier:          G2Mulgiud05y+HRa1SjD9ldLKbSiWD7QL75fVSf2pgw=
Subject key identifier:   71:12:E9:77:61:59:BA:06:2F:77:0F:1A:C2:00:0B:FD:A2:4A:F8:48
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F43285847CA3F8198A9D7AF08DD1B7190
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20237
IP address blocks:        192.103.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:81:98:a9:d7:af:08:dd:1b:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=3a1e306f-a2b5-4afd-b863-21d805a30cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:41:a6:f0:00:c2:d4:9a:1e:eb:a7:e2:79:
                    18:8c:65:78:36:4a:10:7e:7e:a5:13:7f:ee:e8:1e:
                    de:3a:69:61:6b:c0:b6:ca:f5:d9:4d:45:19:86:24:
                    38:c4:da:a5:1f:39:aa:30:6d:06:bb:0c:7c:d8:82:
                    83:bb:c7:ea:e7:a7:86:90:63:cf:df:15:11:85:4b:
                    c0:bd:db:fe:17:be:f1:56:24:ec:c2:53:21:a2:f4:
                    95:77:fe:0d:54:dd:06:3d:43:01:5b:a3:a1:95:3e:
                    25:45:ee:d0:d4:c7:96:e8:a0:b5:b1:6a:2a:40:d6:
                    5f:cc:a7:a3:5f:e0:9c:8d:cd:eb:aa:96:4f:cb:6e:
                    8a:3f:5d:a7:da:1c:dd:56:67:fd:ec:a1:6a:e3:b0:
                    61:88:5c:56:08:f6:4d:90:e9:d5:97:0b:bd:77:ff:
                    fc:48:79:e8:a6:b2:43:80:fa:36:f5:7b:61:cb:61:
                    3e:1f:ee:94:b6:a9:45:31:40:bb:cc:4d:97:b7:36:
                    60:a8:6f:ed:1d:eb:db:bf:da:0f:06:d7:75:df:aa:
                    ab:3a:af:57:aa:8e:3f:bd:ae:f7:21:f7:85:61:9d:
                    2d:8d:36:77:6d:19:86:52:50:01:69:ae:17:c0:36:
                    88:63:fb:80:c6:6f:27:e6:b4:e1:16:45:47:02:a8:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:E9:77:61:59:BA:06:2F:77:0F:1A:C2:00:0B:FD:A2:4A:F8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:35:f9:18:89:a8:1c:59:0a:fd:3d:25:9b:18:70:dd:7a:f8:
         b7:50:88:1f:1e:93:93:f7:2d:7b:f8:82:72:e6:9c:3a:f9:ac:
         ed:61:30:1d:51:b6:62:62:81:d0:c1:31:14:37:27:32:a0:6d:
         0e:b9:d1:25:d7:42:4d:01:a5:f1:62:f7:1d:07:d1:37:bb:2d:
         96:2b:77:a9:dd:d6:b7:2f:b6:26:9d:23:78:7a:00:5e:7b:5e:
         77:ab:52:8f:1c:f2:42:f4:2f:55:19:5b:de:42:76:de:d2:8d:
         a8:06:be:94:e5:22:09:ef:50:26:38:91:6c:41:ea:6c:4b:db:
         0a:4e:5b:33:eb:f7:6f:26:24:01:33:80:0e:70:27:35:b1:47:
         78:94:da:45:47:82:6d:e8:88:cd:3f:ac:bf:8b:29:e0:2c:61:
         14:d9:98:18:48:4d:0e:99:9d:54:31:bc:8e:c6:bf:fc:36:23:
         0c:5d:1d:9e:39:35:17:b4:de:3a:e9:f2:08:c7:39:46:cf:28:
         c5:47:ee:6d:ec:ec:ed:fa:48:7e:35:79:5c:19:4b:f8:29:31:
         67:94:53:9a:a9:eb:19:e6:b9:04:78:8a:cf:9e:0f:9b:49:63:
         13:47:23:29:eb:d8:bc:b0:d6:01:94:12:44:63:c5:78:29:e7:
         53:29:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org