Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3633a00c-1cbb-3abd-8cb0-ec43089f4903.roa
File:                     3633a00c-1cbb-3abd-8cb0-ec43089f4903.roa (raw, json)
Hash identifier:          JG3G3CxnG79I0DoJfErLyHinBNEYsT60lo1za6Pz9QI=
Subject key identifier:   AF:31:D2:32:56:E4:8D:DB:DD:B3:80:AE:E8:B2:2D:1B:8E:E0:43:02
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF482704DA1C36E80C7EDC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3633a00c-1cbb-3abd-8cb0-ec43089f4903.roa
Signing time:             Fri 08 Nov 2024 15:04:56 +0000
ROA not before:           Fri 08 Nov 2024 15:04:56 +0000
ROA not after:            Thu 06 Feb 2025 15:04:56 +0000
asID:                     81
IP address blocks:        192.154.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:82:70:4d:a1:c3:6e:80:c7:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:56 2024 GMT
            Not After : Feb  6 15:04:56 2025 GMT
        Subject: CN=a5c37522-5c5b-4a99-bd17-c9a6cf16cdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:25:76:e5:57:0d:6d:1a:41:17:61:e3:1b:
                    78:ab:6b:d4:53:10:b6:0b:5f:fe:a6:6f:e7:63:f8:
                    c1:bd:e9:c1:29:24:28:43:0d:b1:94:b5:e8:50:8f:
                    b6:d0:9b:1b:9a:98:e4:ee:08:ad:6b:87:64:b1:71:
                    29:f7:53:f2:cb:0d:05:8b:98:92:84:2c:1a:ed:21:
                    13:33:17:32:76:87:75:fb:31:1e:ca:d3:0a:95:d5:
                    b3:00:eb:0e:2e:ff:26:f4:e6:eb:de:c8:98:d3:d6:
                    35:4d:01:67:49:45:a0:5a:b4:29:ea:05:7c:4b:aa:
                    2b:79:e1:96:58:22:f0:b2:f6:4a:cd:ae:1c:77:71:
                    9f:c4:88:8c:86:c0:c7:97:dc:aa:cf:ac:f6:cc:da:
                    5a:b7:51:df:a7:31:d8:2f:2e:ec:bc:f7:2d:8d:84:
                    66:96:bf:14:a0:be:bf:68:1f:91:fd:1c:b0:f1:b5:
                    97:85:bd:7b:ba:cc:a1:88:da:07:ef:b1:71:be:18:
                    7e:2b:6c:44:10:9d:99:a7:16:5f:1b:50:35:8b:c8:
                    e3:2b:0a:46:e7:ec:c5:c6:be:0a:9b:3f:05:5c:ac:
                    d3:7a:fd:ce:48:fa:4c:c5:4c:ad:3d:ab:4e:26:80:
                    a6:08:cb:b4:50:70:46:47:1a:e5:ce:16:d0:0d:33:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:D2:32:56:E4:8D:DB:DD:B3:80:AE:E8:B2:2D:1B:8E:E0:43:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3633a00c-1cbb-3abd-8cb0-ec43089f4903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:73:eb:7d:e0:e5:37:23:bb:be:71:21:79:d1:c5:72:d6:39:
         0d:e0:f8:3f:bb:4f:cd:5d:e7:02:f2:5f:05:6e:93:64:bf:0b:
         1b:0b:b0:33:aa:9c:0b:32:5b:ef:8d:b8:e5:ae:b3:33:8a:69:
         46:5d:7b:4f:63:d8:06:eb:cf:4c:0c:81:5e:ea:11:de:d7:3a:
         f5:07:c4:fa:6f:7e:68:1e:29:77:18:e3:ff:46:ce:07:60:35:
         8d:78:06:42:27:f4:b1:f9:bd:d4:62:38:d1:2b:a3:91:a7:b3:
         b8:43:75:0c:ec:e6:5f:55:1a:5f:d2:16:3c:ff:a7:07:e9:90:
         1d:be:29:56:a0:b8:1f:ef:5d:15:34:ea:75:ae:59:32:47:62:
         ef:87:99:e4:2f:15:e5:a0:cd:82:50:cc:cd:aa:e6:b3:70:b4:
         3a:d2:4f:9a:71:3a:c6:6d:71:1f:4f:7b:ac:49:8a:33:d8:7c:
         fb:8a:68:68:ab:cf:24:dc:f1:fa:c8:2d:a3:cb:01:ad:71:33:
         29:33:23:69:0e:06:71:54:d8:d6:f4:c6:6d:96:1f:6c:cd:40:
         e7:27:8a:41:3b:c8:d8:25:e8:b8:8a:bd:ca:72:8d:dc:80:5c:
         ec:21:d7:fe:10:44:1e:ff:f7:1f:7f:7f:b4:73:66:1e:79:5c:
         0c:9a:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org