Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
File:                     bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa (raw, json)
Hash identifier:          1R4VLSVetDvSTvtxd4opr5O4Sqj31kYOmI6Hs7wZ9Y0=
Subject key identifier:   01:DD:88:4F:05:16:02:DC:A0:B5:57:AF:DD:C9:F6:53:A8:8C:36:0F
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584788865755B324215675F9D840
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     396982
IP address blocks:        199.47.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:57:55:b3:24:21:56:75:f9:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=8d4530cc-888f-4ac9-9930-7a9ddc746b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:01:a2:e9:10:c3:0e:2d:8e:a9:95:ef:8e:46:
                    26:99:cb:4c:50:c8:63:b0:a9:7c:ac:89:bc:03:1f:
                    2d:78:02:98:8d:ec:69:42:56:3c:8b:50:cb:69:c2:
                    bf:8b:6c:62:ae:16:b1:d7:46:96:86:43:5c:69:5d:
                    8c:ba:7a:04:21:72:59:3b:01:56:30:5a:e9:53:7e:
                    3a:90:a3:28:34:c1:be:7e:7e:61:de:b9:4d:b0:48:
                    1d:d0:a2:13:13:1a:84:9e:1c:4d:4b:7f:3c:95:55:
                    98:c6:ce:80:13:c2:c8:16:cc:a4:e9:9f:fc:74:c2:
                    20:8f:62:4d:32:92:b9:8b:7b:28:f7:e1:bf:86:b5:
                    98:98:9f:73:6c:52:20:2f:42:72:b5:af:30:fd:26:
                    b7:03:09:29:42:02:63:58:16:e2:bd:69:66:90:1b:
                    7b:65:d3:bf:fe:03:d7:41:c0:0d:5b:cb:a8:7e:52:
                    1d:ca:b1:3e:16:9f:e4:20:52:0f:52:d1:74:f1:19:
                    b7:dc:69:64:0a:b1:c1:5d:d7:e8:0c:0a:cf:9b:0e:
                    0c:5d:4b:5f:8a:13:41:1a:4d:ba:3f:dc:d5:02:36:
                    e1:40:df:62:59:e9:d5:c1:fd:85:20:ed:7a:fd:30:
                    c5:53:2f:b4:8f:2e:25:de:f7:70:81:20:a0:29:44:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:88:4F:05:16:02:DC:A0:B5:57:AF:DD:C9:F6:53:A8:8C:36:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:24:9e:a8:f6:2a:cb:3a:bc:a2:7f:59:f9:c8:42:0a:43:
         3d:c2:aa:94:27:62:84:ac:0b:c9:cd:5b:16:1a:5d:4f:7c:9a:
         1f:80:74:63:8e:db:70:a2:14:4e:6e:f8:2a:ce:d6:5e:35:e3:
         96:db:06:2b:79:32:fc:51:4d:9a:0b:0e:08:71:63:b4:6a:e8:
         71:45:ca:81:9a:33:c4:eb:27:18:43:56:f0:82:c7:65:87:6c:
         b4:75:6f:ad:3f:19:17:4c:10:3b:7b:45:a4:6b:9d:93:e4:f7:
         4c:1b:03:36:65:ab:51:0b:c1:f3:3b:49:06:0f:c9:0a:89:66:
         d0:bc:5f:fa:b3:a5:73:08:41:b5:1e:d8:89:36:78:22:a0:79:
         4a:88:e6:37:cb:ea:99:52:b5:72:be:8e:e4:95:32:6d:32:db:
         b1:37:41:b4:44:ed:79:7e:b6:79:99:e7:8d:cf:24:e3:34:94:
         90:a1:e8:f0:d3:c4:a9:c0:8b:c1:f8:9b:a0:74:a6:88:f4:90:
         fd:c0:1a:c0:d4:a4:c2:df:d2:52:44:9f:40:9f:ee:e7:d8:ad:
         1b:90:ad:a3:ab:2d:a3:2d:9e:98:a9:cc:f1:3e:c5:6c:8d:07:
         ef:ea:0a:72:d1:56:a2:59:9a:37:b3:f9:fe:57:1c:47:1b:88:
         2b:e7:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org