Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa
File:                     680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (raw, json)
Hash identifier:          UrephMktherFwbOLB4S6xNBpOt+Y9Uc1mNzmdXur2ic=
Subject key identifier:   ED:D2:AB:E0:8C:F1:A0:32:31:5F:8D:80:4D:F4:E5:1D:3F:47:B8:CA
Certificate issuer:       /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce
Certificate serial:       010D0C9F4328584765C2B3CE70EA8649F30CC400
Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa
Signing time:             Tue 01 Oct 2024 14:08:54 +0000
ROA not before:           Tue 01 Oct 2024 14:08:54 +0000
ROA not after:            Mon 30 Dec 2024 15:08:54 +0000
asID:                     11700
IP address blocks:        199.71.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:c2:b3:ce:70:ea:86:49:f3:0c:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce
        Validity
            Not Before: Oct  1 14:08:54 2024 GMT
            Not After : Dec 30 15:08:54 2024 GMT
        Subject: CN=13f6986c-e062-43ad-adff-18fa577e5879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:a8:4a:4b:a0:21:4b:71:df:e4:bc:3c:89:
                    4b:03:31:6f:b2:0a:2f:a5:58:4d:e0:90:b6:41:0f:
                    5d:ca:0c:8c:d7:1d:6d:f0:a0:c0:8f:5e:f9:84:f4:
                    a4:a3:87:a1:70:23:3c:6f:95:40:a8:ff:55:45:c8:
                    bf:b6:03:6c:cd:1d:9d:3b:a7:ab:da:09:4e:8f:ae:
                    a6:fd:c1:91:31:67:5e:5c:a4:41:8c:df:e0:2d:72:
                    88:a4:c1:69:56:e5:65:c1:22:f7:88:5e:f8:26:3f:
                    36:f7:7b:59:4c:36:8c:a5:bf:e5:dc:be:11:58:50:
                    db:4a:ee:ae:22:b4:7a:13:b6:10:42:85:99:a2:66:
                    f5:3b:49:a0:a8:02:86:1a:fd:fe:6a:cf:6e:c0:8e:
                    7a:52:16:c5:c1:e4:61:fe:1e:c8:d4:dd:d2:28:03:
                    2b:5c:0e:1e:4e:46:fa:2a:2d:56:4d:8b:53:84:d8:
                    6f:11:38:6d:c1:ba:6c:7a:c6:db:bb:d1:91:e3:5f:
                    30:80:5b:12:32:57:d7:ef:2f:b1:de:70:62:e7:25:
                    40:c2:99:d1:da:c9:b6:42:ae:1b:cb:56:72:6a:b5:
                    7a:6c:d2:c7:28:20:79:4d:ab:5b:3e:9a:5c:71:f3:
                    50:24:1a:55:fb:05:aa:1b:9b:eb:a2:ce:b4:63:17:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:AB:E0:8C:F1:A0:32:31:5F:8D:80:4D:F4:E5:1D:3F:47:B8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl

            X509v3 Authority Key Identifier:
                keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:14:c8:dd:01:ed:9c:c3:a8:7e:b1:a5:66:c4:f5:69:3c:
         45:4b:82:e3:e8:25:62:a1:ef:7b:17:43:f7:ca:ed:3c:16:06:
         d8:80:01:49:c0:2d:45:09:ed:92:3c:51:5f:b4:82:69:a1:21:
         29:de:92:e5:8a:65:be:6b:46:98:cd:eb:6e:b9:31:c8:3e:04:
         52:b5:ef:73:30:31:24:5a:7a:26:10:25:04:32:93:e6:cc:cb:
         4f:2a:88:48:d4:df:56:43:69:e5:47:3d:c8:8c:1e:14:c1:a5:
         80:9c:ff:df:70:e3:9f:6e:1f:ad:41:ae:92:d1:b8:02:20:84:
         d1:90:c6:96:a8:3f:7f:b0:76:e6:f2:36:35:96:51:bf:63:4f:
         89:e1:78:54:dc:db:72:39:54:c3:9d:bb:53:d8:95:2d:c2:c2:
         53:4d:a5:f0:ec:e1:d1:a3:2e:0f:de:3d:44:e9:63:bc:23:55:
         02:8d:89:6f:2e:73:78:e3:d0:92:d4:2f:49:48:12:aa:26:c0:
         2b:69:0f:af:f0:f3:59:63:83:c4:30:ac:5d:b0:bc:54:9e:14:
         a1:c6:56:43:f8:2b:3f:38:2f:27:39:93:8c:7f:83:19:d9:53:
         e6:65:15:69:97:8a:5f:dd:f2:53:6d:53:59:af:fc:08:3f:17:
         c2:74:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:15 2024 by rpki-client on console-fra.rpki-client.org