Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
File:                     a082d65c-6976-35d6-be33-792a4918c345.roa (raw, json)
Hash identifier:          fxZpo+Hgy77uCd5kQpodKf6Ec6tJmsoXK1qb82bm9Q8=
Subject key identifier:   19:3E:26:2E:EB:F5:80:B8:2C:45:05:4B:BA:CA:A9:90:10:BA:E2:88
Certificate issuer:       /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
Certificate serial:       010D0C9F4328584782F0FB06386D02771C065780
Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     394438
IP address blocks:        192.163.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f0:fb:06:38:6d:02:77:1c:06:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=5e9b1844-4de1-44c7-a351-57911597771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:fc:e8:d5:20:5f:dc:d3:56:1a:5f:85:cc:
                    07:ba:57:dd:6e:75:e0:fc:d9:f6:f3:e4:d3:f1:25:
                    23:35:f6:1a:70:b0:27:db:e5:d6:3e:5e:08:70:0d:
                    b9:6e:15:41:ea:40:4f:d3:3b:65:e2:75:f9:50:ac:
                    15:2b:24:dc:32:df:8b:40:3f:e9:b3:3d:75:3f:58:
                    ce:b3:b8:cb:f4:94:5f:2b:89:1b:00:dc:ad:14:1b:
                    10:03:69:c1:ef:7e:25:fb:ac:79:ce:88:16:49:6f:
                    1a:e6:2b:65:bd:dc:2e:15:e8:4c:55:41:1e:ae:1a:
                    eb:81:a0:f7:7e:83:e3:d2:6c:96:cc:29:0c:18:a3:
                    2b:80:ed:62:75:76:63:78:e4:bd:54:f2:8f:c9:8e:
                    28:2c:8f:05:8e:87:eb:82:e8:04:fe:eb:fa:ad:2e:
                    3d:68:4a:05:58:f7:e3:1e:cb:a6:fd:5b:01:aa:35:
                    18:d2:d9:f4:28:82:bb:89:87:d0:99:bf:1f:d6:70:
                    26:93:5b:14:4b:8e:58:df:14:f1:98:87:82:a4:60:
                    5d:9f:91:19:29:c2:56:21:a8:13:0d:f3:59:b4:94:
                    63:5c:84:1e:5e:72:f5:da:2c:52:d4:7a:8a:85:0e:
                    79:68:81:b7:ac:c5:51:63:4b:a8:62:9a:b3:e6:ba:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:26:2E:EB:F5:80:B8:2C:45:05:4B:BA:CA:A9:90:10:BA:E2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl

            X509v3 Authority Key Identifier:
                keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:7f:67:41:cc:d4:b9:f8:a9:4e:79:d2:78:ae:4f:08:29:
         b6:ed:3c:be:a3:a1:5b:fa:01:91:3e:f0:d3:3a:9f:9b:6c:6f:
         56:25:79:24:d1:29:ac:05:bc:f9:ee:2c:19:8d:fb:19:ee:fc:
         eb:ce:6a:e1:67:ef:6b:31:31:ca:87:53:48:59:59:73:a0:f2:
         3c:5d:da:04:0f:ad:a5:ab:3f:50:40:e5:a0:2c:eb:5a:64:0e:
         d1:db:a3:c2:8e:c2:ee:c6:78:c0:3d:a9:22:1b:1a:8c:1f:12:
         46:a7:65:5d:a2:f6:97:6b:e5:cd:f0:71:56:de:62:57:38:54:
         56:d0:04:f4:7f:c0:5a:a1:a3:a8:64:fb:eb:ed:89:ff:d4:b5:
         1d:4f:c5:69:32:76:0e:5c:8e:86:f1:5a:6d:04:6c:1a:a3:7a:
         a0:f0:2a:be:9a:29:70:48:c6:a9:31:9d:51:da:ed:04:e7:85:
         00:9c:5d:61:21:0d:34:46:b9:df:b8:ca:38:29:ca:8b:3a:78:
         61:6b:a1:96:b1:d1:d2:e6:bb:2f:9b:c4:0a:4d:77:ac:27:66:
         94:82:62:87:ac:26:d8:53:08:01:b9:cd:e6:f6:dc:af:2f:20:
         1d:ec:af:b4:1d:96:ea:a8:72:fd:8c:9c:e1:95:8c:1e:17:34:
         7f:74:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:23 2024 by rpki-client on console-ams.rpki-client.org