Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa
File:                     e9b9df54-da0b-3a58-930f-e5791a98bece.roa (raw, json)
Hash identifier:          nko3tYuScNuUMe2yr+HanR9SOX8CMXGR9PvX5fLf/OU=
Subject key identifier:   B4:F6:46:0C:42:E4:C8:AF:55:A2:D7:AC:C5:50:A8:07:CC:32:F7:A8
Certificate issuer:       /CN=139ae48a-9a2d-4f4b-beff-322b2a47a525
Certificate serial:       010D0C9F43285847C1DF46FC4348071330E93480
Authority key identifier: BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     32782
IP address blocks:        199.248.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:46:fc:43:48:07:13:30:e9:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139ae48a-9a2d-4f4b-beff-322b2a47a525
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=639b8a5e-7132-4e12-a0f0-85737b65f593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:bb:2d:78:f2:53:15:22:37:a8:cf:bf:fd:
                    1a:4f:5a:15:8e:84:6e:7e:b9:1a:4a:37:bd:7c:49:
                    06:60:ed:b3:9d:bc:33:e8:1d:f7:8e:eb:e2:da:32:
                    e8:c7:69:97:69:82:9b:dd:9b:eb:c3:de:25:2a:0d:
                    d5:fa:3d:d6:ff:eb:a4:ef:cd:61:24:b5:22:60:b4:
                    21:1b:6d:06:16:80:62:ff:bd:29:d9:40:92:f9:ee:
                    51:ef:43:91:97:ea:e9:d0:26:bc:da:13:1f:65:23:
                    5e:dd:00:0e:a1:df:17:2c:8b:49:87:d2:c4:be:29:
                    03:59:59:b9:e1:e2:ac:17:2e:b4:dc:cf:89:33:01:
                    09:8d:91:7f:0f:72:00:d0:13:31:e3:20:5d:eb:ee:
                    11:74:e0:f6:de:f5:7c:ad:84:94:02:c8:d7:ff:67:
                    3b:5f:e6:e1:42:3d:fa:e5:d6:cd:65:7a:2c:19:8c:
                    9e:9d:3b:5e:70:3f:dd:fe:5b:49:36:88:0a:95:5b:
                    29:73:70:40:e7:fd:ca:ae:56:69:57:1d:65:15:35:
                    6a:ba:2e:11:af:48:48:35:c2:af:99:5e:b6:bc:28:
                    0a:be:4c:af:20:35:f5:b1:b5:41:02:e5:6a:cf:1b:
                    ac:72:f6:9d:a7:f9:1f:7b:b5:83:97:87:d5:b0:80:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:46:0C:42:E4:C8:AF:55:A2:D7:AC:C5:50:A8:07:CC:32:F7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:aa:8f:98:63:44:de:5f:3c:d5:87:20:40:0d:77:5c:09:
         8e:b0:9c:09:1e:c4:9a:11:c3:4c:b0:d6:49:d9:39:62:59:8c:
         2f:bf:d1:bd:84:a1:71:74:51:81:c4:5a:f5:45:53:5f:24:c6:
         e2:60:62:62:91:10:6f:a6:ef:53:c8:0f:03:74:89:f9:dc:40:
         dc:05:b3:71:59:e4:4a:6a:ce:9f:8f:0e:fb:77:92:fb:21:8d:
         75:c8:50:cf:51:d2:2e:c5:cf:15:d6:73:8c:29:6c:55:d2:3a:
         af:19:4c:64:4f:7e:73:f1:7a:dc:5b:e8:08:0b:c3:e8:27:d7:
         0d:59:f0:44:02:9b:81:e4:d6:67:d9:62:e2:a5:4a:e9:71:e5:
         2c:43:df:08:5b:f6:a5:a8:3a:fb:f6:65:66:9a:d9:5e:01:5a:
         9f:6a:47:cc:57:cd:4f:cb:2e:e8:08:55:63:2c:26:00:b9:54:
         76:8c:1b:32:55:fb:63:62:2c:7b:5c:89:35:22:ba:f2:fe:88:
         b8:a8:4f:a5:e4:da:3a:2c:14:3d:87:46:7f:3e:7f:d1:c6:52:
         f7:99:fd:d7:31:b7:60:18:e7:1d:5b:e0:6f:d7:b6:b9:3e:e2:
         77:e0:98:9f:9c:df:8b:f1:89:7e:5f:07:a2:33:3a:f2:f2:7e:
         84:96:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org