Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8592c7ec-6de6-3153-9708-720465b87711.roa
File:                     8592c7ec-6de6-3153-9708-720465b87711.roa (raw, json)
Hash identifier:          4Cm8ieZcaU298Cv/kx/jKzWH2genr4tFhx8BD1f/kwA=
Subject key identifier:   1E:2E:BA:40:C4:40:58:92:BC:B7:FE:D5:CC:7A:60:BF:45:DD:08:D1
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F43285847E094C43355A2DF1BE75CFB40
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8592c7ec-6de6-3153-9708-720465b87711.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     33193
IP address blocks:        199.7.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c4:33:55:a2:df:1b:e7:5c:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=fe5d0fbc-3731-4d42-a2b6-3e8e4d53e97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:7c:b0:72:4a:e9:43:e6:bd:4b:92:3b:2e:
                    8f:61:be:e3:92:c8:2e:3d:56:92:31:2d:a5:95:bd:
                    a2:42:ee:10:b7:67:3b:ad:cb:43:03:99:67:28:b7:
                    77:0a:1f:76:1d:0e:cd:9e:5c:84:23:8d:a9:eb:0a:
                    53:05:4d:44:69:1f:3f:82:fe:0d:c5:c7:25:ca:98:
                    db:ca:a2:d5:d3:65:e4:57:88:b5:ff:7c:3e:a2:6f:
                    9a:eb:7e:de:e8:c5:85:de:4d:5f:a8:54:83:8f:ce:
                    b0:7d:6a:3b:97:32:1f:bc:19:61:54:c1:27:0e:55:
                    d4:91:c1:a5:18:78:ba:d3:cb:9c:ff:ce:b3:9d:88:
                    8e:84:8a:e9:37:c7:f3:88:d7:03:e3:57:f4:08:b6:
                    a5:e7:f9:fd:a3:05:de:eb:f8:ee:85:ce:5c:bc:14:
                    e2:fa:0d:1d:dd:ea:d7:bc:ec:42:6b:cd:81:eb:bb:
                    38:66:7f:f2:d8:12:8a:c8:14:16:4e:50:0b:dd:8d:
                    6b:cb:db:b7:05:e1:86:44:96:f3:4e:7e:97:0d:ca:
                    a9:6b:76:cc:6d:20:89:1d:b2:80:c1:c3:31:d3:f0:
                    35:7b:6e:07:a2:ce:49:6f:18:81:5b:35:b9:17:5b:
                    c9:63:27:b7:21:31:43:09:f4:ae:89:9a:82:9e:56:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:BA:40:C4:40:58:92:BC:B7:FE:D5:CC:7A:60:BF:45:DD:08:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8592c7ec-6de6-3153-9708-720465b87711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:61:43:21:63:64:be:38:20:ea:27:aa:3a:ae:a6:74:56:05:
         47:fe:13:a7:69:18:8c:d8:76:87:b7:1e:b7:e0:47:cd:87:e8:
         f2:a1:cd:af:16:8d:a6:de:30:0d:f2:ea:27:a0:f0:e2:e9:10:
         2d:41:0f:b1:5a:36:ad:77:dc:d8:cf:89:e3:e5:a3:48:f9:dc:
         d8:8c:90:4e:e4:7a:06:4e:91:c7:1c:e7:ab:2a:c8:c5:c6:26:
         d4:7b:a8:cc:0b:b4:d4:41:f7:e9:e4:88:42:32:28:a9:d0:55:
         a2:21:4f:94:28:a5:5d:28:01:f2:53:57:6d:9d:26:7d:7c:db:
         54:4c:a9:ce:bf:78:90:62:07:c3:bf:8b:70:18:5c:34:2a:a8:
         18:4d:98:25:45:25:c8:8b:62:94:15:cd:94:73:7d:c0:7c:46:
         52:ec:de:37:e5:4d:e7:1b:73:14:cd:b1:1b:38:4d:55:ae:94:
         cf:78:63:d2:2c:06:4c:be:e5:7b:33:7e:c1:0b:40:db:68:e8:
         e6:cb:09:b3:e0:eb:67:68:39:bd:7d:b0:9a:ea:ef:54:49:cd:
         9d:f2:08:c0:3e:76:8a:7d:e4:9f:47:7e:8e:16:8a:eb:1d:ea:
         26:e2:4d:73:98:70:b0:4d:04:8b:2f:e5:38:ea:a8:8f:84:9d:
         74:c0:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org