Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
File:                     3654a19c-8d59-3571-9690-2f911097cca8.roa (raw, json)
Hash identifier:          cUr5/GYL+SXesDt/M0/U5SKe1Xoc0avfB4VAZXYceUw=
Subject key identifier:   CD:C7:54:07:66:C0:57:8D:21:03:31:40:14:F8:A2:0C:E8:10:74:38
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F432858479C111FB3DEACAEAB5E049980
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        198.187.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:1f:b3:de:ac:ae:ab:5e:04:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=8226845c-5377-43c3-a8f3-28da452b7bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:d9:c7:b4:0b:75:38:85:54:26:03:d9:e5:
                    0f:57:0e:c1:01:d3:be:51:66:a3:2d:0b:df:d0:d5:
                    59:80:17:88:df:77:1d:ce:6c:17:86:ef:11:f0:ab:
                    dd:62:d8:f4:8f:19:c6:5c:77:ee:09:e5:b0:a2:15:
                    df:79:22:2e:09:dd:48:b3:0d:f0:48:33:46:07:13:
                    d5:72:fb:86:2a:32:35:a9:81:3e:5c:ff:e1:de:61:
                    e6:a9:c4:ba:2a:d0:04:48:de:9b:10:e4:3a:4a:dc:
                    ee:1a:98:7c:92:7d:c5:60:d9:29:a5:f3:cd:1c:86:
                    71:32:51:e8:b7:8f:cf:8c:cf:37:fb:9c:a9:26:db:
                    2b:f2:97:4e:c1:af:ea:8a:5b:0b:d9:6b:51:5e:94:
                    9b:5b:eb:32:8a:e1:33:32:18:bd:6a:d8:0f:de:06:
                    01:6e:2e:f3:e6:5f:02:46:bf:73:a1:c2:49:f4:d4:
                    d1:d4:41:71:7f:84:24:cb:01:d8:0e:b6:d2:47:a5:
                    f2:89:fd:93:67:13:5b:21:59:41:40:ca:c9:92:7f:
                    bc:fd:56:9e:04:b9:8a:f2:21:f6:5f:d5:0f:c3:74:
                    36:29:5a:b5:74:d6:ce:0c:8a:b1:3d:27:0d:20:97:
                    e9:df:07:79:d0:4f:11:d7:31:de:f3:4b:d7:4d:32:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C7:54:07:66:C0:57:8D:21:03:31:40:14:F8:A2:0C:E8:10:74:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:b8:03:4b:0f:5c:c9:dd:67:42:10:1e:9e:f3:69:e6:ef:
         6d:e6:5e:9c:84:4b:f1:28:2c:0b:57:88:46:58:64:fd:3f:c2:
         22:31:e6:a0:fa:11:75:b0:ef:b4:17:3c:1d:20:c7:e4:53:b6:
         21:ce:c2:d5:05:02:d6:36:fd:b6:fb:ab:d4:e2:8f:29:d7:b7:
         c4:b8:12:28:d6:24:22:dc:4d:ab:f7:87:cf:f7:69:ec:19:b9:
         32:80:fd:89:e5:3e:e3:02:fb:8b:14:99:b8:85:56:53:29:75:
         e7:1e:9d:25:8c:64:a5:fa:69:88:2b:ec:73:f3:36:ad:6e:5a:
         e2:64:7e:35:a5:84:3f:bb:2f:09:54:7e:f5:f8:4f:d3:6e:d2:
         cc:c9:33:87:0b:51:3e:e6:15:51:b2:c9:47:be:cd:a5:e8:9f:
         09:51:09:1f:ce:a5:36:f1:2c:23:b4:17:fa:be:a9:90:0f:61:
         62:05:82:2b:2e:55:f7:de:a7:ae:8f:c8:37:7a:5a:31:0e:fc:
         aa:c3:6a:23:58:f6:0d:a2:d0:da:db:a5:7e:30:d8:b3:7e:8a:
         02:3e:5f:12:5a:75:a8:eb:e8:f0:1a:00:b6:07:c9:a4:63:9a:
         3b:69:56:9f:5f:03:6d:7c:30:db:77:3a:01:3b:2e:8a:db:71:
         4b:f6:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:21:01 2024 by rpki-client on console-fra.rpki-client.org