Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa
File:                     0f497500-d8aa-34a7-8832-9a1723a50b4c.roa (raw, json)
Hash identifier:          WCWnMgXaGFuWQyYV4j34OsGERLTSpB61f7l3TGTf9Zk=
Subject key identifier:   34:50:1B:23:8A:BD:3D:B1:CD:D7:9A:DD:5C:39:FA:DF:8F:0D:46:0B
Certificate issuer:       /CN=08190b53-d45c-48b6-a6c7-7c0769d864a4
Certificate serial:       010D0C9F432858473A5B30FDA9D6FF90683DEC80
Authority key identifier: B0:F8:C4:8D:22:38:1A:A8:CF:FA:59:E6:00:3E:92:EE:9E:DE:73:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54131
IP address blocks:        192.12.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:30:fd:a9:d6:ff:90:68:3d:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08190b53-d45c-48b6-a6c7-7c0769d864a4
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=226bad4b-d015-4ce7-912d-d1657663a2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:40:f1:31:5e:01:93:fe:8a:be:04:5c:7c:
                    83:80:1f:31:22:f7:a7:52:41:c5:6a:d1:9a:74:08:
                    42:ab:3b:38:c0:3e:4d:1f:86:47:8a:80:de:b0:0b:
                    52:10:de:e9:fa:1a:13:8a:62:5f:b1:33:b5:ec:fe:
                    57:3d:55:58:e1:5c:72:25:71:4a:2a:96:37:44:86:
                    d6:8d:67:b9:81:46:fd:a5:8a:5e:7c:e9:47:33:48:
                    81:2d:ac:a3:33:4e:cc:aa:a5:b8:4b:17:17:be:0f:
                    7a:c6:99:8e:d4:85:cb:d6:00:3c:3a:96:0f:78:3f:
                    1c:10:cc:b2:3b:8c:9f:76:c0:ae:4a:97:28:b9:fd:
                    c6:53:c2:53:fa:b9:df:7d:bc:0a:cc:92:1c:f2:d7:
                    65:20:0f:dd:02:88:9f:78:2e:8a:a6:3d:7d:9a:9a:
                    bc:fe:e5:39:41:31:af:08:1a:5a:60:0f:96:c3:8c:
                    7f:fe:76:de:fd:c3:eb:42:80:61:7f:90:71:fc:a0:
                    5c:e9:35:00:ae:e0:dc:cc:e2:1c:be:e3:91:54:74:
                    e0:35:35:33:6a:da:f6:f5:45:c4:8b:b7:48:e4:0c:
                    bc:3d:3f:d1:b9:1f:79:4d:ca:25:d6:9a:06:66:a5:
                    c5:b4:44:c2:79:f6:0f:b8:25:47:99:b0:fb:9f:e2:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:1B:23:8A:BD:3D:B1:CD:D7:9A:DD:5C:39:FA:DF:8F:0D:46:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.crl

            X509v3 Authority Key Identifier:
                keyid:B0:F8:C4:8D:22:38:1A:A8:CF:FA:59:E6:00:3E:92:EE:9E:DE:73:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:9f:5d:d5:9a:50:25:08:61:b3:05:1b:8b:5f:04:c4:7d:
         ce:b7:1e:c1:db:ae:f6:50:21:61:b7:c3:9a:50:35:da:25:21:
         c5:02:da:8c:d2:70:2d:2c:03:b4:dc:8d:78:12:3d:83:4c:2b:
         dd:f5:c5:73:de:a1:b5:da:2f:e6:de:68:90:de:2f:7a:e1:5c:
         ff:00:44:c4:c5:8e:bb:52:24:af:89:68:ef:fd:90:29:dc:9f:
         6a:90:d4:18:2d:47:37:06:09:46:36:43:72:89:48:bb:86:1a:
         0c:43:6f:6f:74:19:e7:71:0c:10:bd:bf:0e:08:fc:5d:2a:ae:
         3f:af:09:db:2b:f0:51:33:4b:aa:2d:7c:75:e7:04:d8:23:0f:
         5b:4d:cb:9e:a0:4c:1d:da:d4:7b:c7:54:a2:b1:09:a1:ea:0f:
         03:9a:8b:f3:54:85:b6:4d:8b:3a:1d:da:f8:6b:9c:31:02:07:
         ad:51:f6:37:c6:eb:76:08:86:bd:98:7b:36:27:75:f7:12:77:
         16:70:d3:78:0f:96:53:ee:4c:a3:17:63:61:03:3b:58:fe:89:
         a5:31:2d:ae:1b:7e:92:23:d5:23:94:68:9e:f7:5d:fd:1a:d0:
         35:53:c8:28:10:b2:eb:c9:c4:c4:7f:81:1a:25:86:c4:51:f9:
         5b:e0:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org