Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/5c19abba-bd68-3c94-9c22-c80bbd735865.roa
File:                     5c19abba-bd68-3c94-9c22-c80bbd735865.roa (raw, json)
Hash identifier:          O3z4d72UifqJzEFAo7ZfpFDw3+qiOy5Wsac27uzsx3w=
Subject key identifier:   66:C7:0F:C0:C9:13:1A:90:67:FF:17:26:79:1B:5E:05:77:10:6F:0D
Certificate issuer:       /CN=84d4eb80-08dc-4831-917b-fffca15980b4
Certificate serial:       010D0C9F43285847B5315104C091A9382BCAC480
Authority key identifier: 22:AB:CC:EC:F5:E7:52:9F:36:7C:65:DD:7F:3C:69:8E:B0:3D:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/5c19abba-bd68-3c94-9c22-c80bbd735865.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     2544
IP address blocks:        198.49.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/84d4eb80-08dc-4831-917b-fffca15980b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/84d4eb80-08dc-4831-917b-fffca15980b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:51:04:c0:91:a9:38:2b:ca:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d4eb80-08dc-4831-917b-fffca15980b4
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=e4044344-fe3f-4b92-97ac-8eb0220c4440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:42:50:34:3a:69:56:83:8c:a9:62:55:5b:
                    02:0a:cc:b2:6e:1d:3f:99:b9:5c:a7:13:86:94:be:
                    bd:31:9d:c5:f9:ef:da:71:60:54:dc:0d:d1:17:a7:
                    6c:f4:e2:b5:51:e1:c6:66:8b:45:c7:5d:65:27:24:
                    29:b0:ff:91:d6:c7:8b:66:31:74:cf:48:54:c7:04:
                    47:c1:b3:66:e8:da:ca:50:d9:0d:f2:2f:71:de:e8:
                    8e:0b:2b:69:fc:72:20:6f:8e:75:e2:5d:b9:66:6e:
                    61:05:f1:ff:19:c2:75:11:bd:94:4d:47:f5:58:c0:
                    51:28:09:ec:98:61:af:67:a5:b0:44:bd:60:88:01:
                    a3:04:15:ca:00:c9:03:f2:75:ff:ab:db:56:e9:ca:
                    0e:62:cc:e8:9d:b2:11:54:9e:3d:2f:5e:3a:dc:b6:
                    07:38:50:ff:de:be:cb:1f:8b:70:74:96:7b:c3:e6:
                    61:ba:65:83:03:a9:1f:4d:2d:97:aa:2e:8b:4e:43:
                    7e:93:4d:ef:c0:97:c8:cb:a3:fb:1f:7c:21:76:3b:
                    b5:8f:42:0a:76:fd:03:07:d0:19:9f:2a:f3:b8:e0:
                    58:e7:45:05:17:63:36:4d:99:b9:4a:39:e0:bd:e5:
                    1f:69:73:3d:14:e8:5a:9b:5a:29:79:1a:61:ad:74:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:0F:C0:C9:13:1A:90:67:FF:17:26:79:1B:5E:05:77:10:6F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/5c19abba-bd68-3c94-9c22-c80bbd735865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/84d4eb80-08dc-4831-917b-fffca15980b4.crl

            X509v3 Authority Key Identifier:
                keyid:22:AB:CC:EC:F5:E7:52:9F:36:7C:65:DD:7F:3C:69:8E:B0:3D:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:3e:b3:7b:f3:6c:e8:ee:eb:93:9d:88:4d:5d:ca:e0:76:
         83:0d:3b:d1:05:2f:2f:e1:01:04:ad:3b:ba:a6:fc:87:bf:d5:
         26:f4:81:ef:70:38:80:e4:87:e9:40:3f:be:a6:8c:34:96:80:
         96:c1:e2:a2:3a:d8:9f:2b:73:bc:69:f3:04:84:07:e0:cf:39:
         5d:b6:23:9e:aa:f8:18:8b:62:fa:b2:33:54:25:5a:78:6b:66:
         15:db:b7:80:4b:03:09:c3:a8:d5:7e:54:34:9f:e0:9c:db:b4:
         7c:03:8f:3e:7b:5e:7d:53:53:5d:9d:81:13:a7:53:16:c9:b6:
         34:a7:d7:36:2c:75:1a:45:c7:06:1a:e7:36:47:75:fe:37:04:
         41:be:75:09:51:6d:d4:5b:56:21:94:1f:78:5b:43:2d:b9:eb:
         83:ff:12:80:5a:96:33:9a:1c:c6:19:e4:fc:13:10:94:22:2b:
         c3:ca:9a:10:36:76:95:23:8d:e4:dc:a5:9c:29:65:1a:8d:d3:
         37:31:56:d0:8b:7e:1a:cc:83:d5:2a:ff:ae:3f:a6:c1:4d:23:
         67:9e:f3:0c:6f:80:b6:7f:e7:be:49:6f:3e:4f:ff:c2:d3:72:
         8c:18:ea:e1:5d:8d:18:71:02:74:f0:82:44:68:18:0e:d9:ea:
         33:e7:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org