Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
File:                     50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json)
Hash identifier:          QmdnnpuO51hNJAnmIEQ83QaeK9jwwx8J6Z3/royhsN0=
Subject key identifier:   1C:A9:A7:F9:73:3C:F0:9E:6B:6E:C6:F4:C5:58:08:90:72:59:53:41
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F7448C9E9492858089B8C0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
Signing time:             Fri 15 Nov 2024 01:55:03 +0000
ROA not before:           Fri 15 Nov 2024 01:55:03 +0000
ROA not after:            Thu 13 Feb 2025 01:55:03 +0000
asID:                     213122
IP address blocks:        128.254.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f7:44:8c:9e:94:92:85:80:89:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:55:03 2024 GMT
            Not After : Feb 13 01:55:03 2025 GMT
        Subject: CN=fa9bbc24-fc9d-4380-8db5-0d86bcc7cc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:57:f6:3f:ac:27:d7:31:58:e5:9d:3e:9b:
                    47:29:3f:8e:ba:eb:3e:2d:9c:e1:79:77:eb:91:23:
                    37:37:6b:16:40:98:0e:85:45:75:42:bb:a2:bb:e6:
                    7f:f2:44:06:f5:d0:e1:2e:8a:db:40:25:c5:09:c7:
                    0e:9f:d0:55:cf:53:53:8b:45:5d:98:a1:15:55:ba:
                    4a:1a:99:30:db:3b:37:d9:9a:88:12:72:9f:23:9a:
                    6c:51:b2:a0:ee:cb:8f:cc:e8:77:b4:b7:2e:96:ce:
                    be:96:2b:ed:a0:9e:c9:da:d4:9c:56:c3:88:8c:c7:
                    ec:b7:ae:17:c7:55:aa:9d:e7:e7:09:26:42:5e:b4:
                    0a:99:22:4d:19:fd:07:f0:f5:4d:84:d0:82:f7:d6:
                    07:87:db:45:8e:59:4c:14:6f:6b:bb:2d:69:62:7b:
                    f0:a5:ed:fa:b6:9d:1e:68:36:df:92:26:7f:44:04:
                    d6:f3:80:f5:7e:3b:63:f8:cb:6f:ce:46:69:8f:b0:
                    70:34:56:9c:c2:db:b5:24:d7:ac:9e:6c:49:1e:9c:
                    70:fe:97:47:0e:95:f8:e2:24:4b:78:63:67:94:40:
                    a1:60:1b:49:87:ea:21:c5:e9:8b:19:f5:ef:26:85:
                    e8:ea:f4:2a:bb:32:fa:36:a3:7a:1a:6a:39:0b:b3:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:A7:F9:73:3C:F0:9E:6B:6E:C6:F4:C5:58:08:90:72:59:53:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:8c:0a:3c:c5:d5:fb:93:f5:8b:1f:6f:8e:cc:aa:f0:f4:
         36:cd:91:0c:61:89:60:e8:a8:e8:74:00:37:10:56:91:da:fb:
         95:62:4b:95:cb:f3:5d:5f:f9:6a:44:bf:d3:31:bb:60:7c:c9:
         1f:71:7d:65:03:48:ae:9c:3d:e2:a9:ce:7a:20:4d:48:19:e8:
         af:30:30:4d:77:99:7e:b0:94:70:7c:f5:a1:be:e6:4a:9e:5e:
         cc:c3:4d:c3:fe:e4:97:8d:6f:1b:72:63:6f:45:6e:5f:d3:70:
         45:3d:8b:12:92:18:d2:c0:a5:e3:53:5c:b8:c4:5f:bd:0f:b4:
         fe:6d:b2:eb:7d:f7:a5:1f:e7:5b:20:ed:90:3f:a3:0d:4d:fa:
         79:e0:87:59:34:26:1f:10:6f:90:5d:17:85:72:05:ce:46:f0:
         10:a5:df:c9:88:d2:39:dc:f1:ec:e0:2a:79:7c:43:83:7c:50:
         c0:c3:55:eb:3f:26:13:f5:b2:29:e1:85:f1:45:10:9f:a7:a2:
         23:03:2d:bb:e1:8f:11:cd:e9:a6:6d:e4:44:81:81:19:21:f1:
         8b:ec:85:d8:21:19:b4:8f:a7:b3:b9:c6:d2:67:1a:9c:40:10:
         cc:d9:9d:28:2c:42:d3:bc:d9:dc:32:c7:42:fb:7a:97:03:f7:
         ac:41:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org