Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8559af88-ce4d-3d92-90dd-7f225c9438c6.roa
File:                     8559af88-ce4d-3d92-90dd-7f225c9438c6.roa (raw, json)
Hash identifier:          p28N3Hf6j3f9HTAEXNOJZzwwPL4lvR27cWet+fHt1yA=
Subject key identifier:   89:70:18:A8:13:1E:4E:CA:0E:B3:B7:D2:27:8D:D1:37:74:23:30:04
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F43285846BE3E286406D510B28F9E2800
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8559af88-ce4d-3d92-90dd-7f225c9438c6.roa
Signing time:             Fri 02 Aug 2024 14:01:50 +0000
ROA not before:           Fri 02 Aug 2024 14:01:50 +0000
ROA not after:            Thu 31 Oct 2024 14:01:50 +0000
asID:                     2055
IP address blocks:        192.16.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:be:3e:28:64:06:d5:10:b2:8f:9e:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Aug  2 14:01:50 2024 GMT
            Not After : Oct 31 14:01:50 2024 GMT
        Subject: CN=588f63a3-0033-4398-8d3a-679fbd77ad9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:78:f1:7d:71:12:92:72:1e:74:63:39:81:
                    e6:df:ca:3a:5b:a1:3b:c2:34:11:86:76:89:98:3e:
                    09:9f:be:2a:27:f4:fd:c7:60:95:5c:69:71:eb:c0:
                    8e:8c:5d:8b:fb:7c:6b:eb:24:02:dd:25:ae:dc:b9:
                    f4:9c:9a:0f:51:39:7e:7f:7b:55:40:da:87:29:b2:
                    13:9f:5b:b2:bb:18:05:1c:b0:4e:02:9f:ad:94:b6:
                    1d:0d:41:34:bf:3e:f6:03:34:1f:64:a5:86:30:e0:
                    c1:38:f0:9d:e5:da:63:50:62:7f:28:88:ba:17:29:
                    84:e6:f9:48:cb:9d:aa:c7:eb:c9:f3:be:4b:3a:d3:
                    fc:da:a6:05:72:31:d6:fd:35:28:ec:b1:ea:d1:70:
                    0b:5d:26:3b:74:32:ec:db:57:d6:c5:a2:80:07:9e:
                    14:d1:9a:a3:39:62:12:7c:f1:cd:40:eb:77:c7:84:
                    57:5d:fa:23:ad:17:bb:48:cc:a4:2e:cd:e2:12:2a:
                    a5:54:cd:06:6b:cf:b4:c8:57:62:b9:c8:fe:a7:e0:
                    f5:95:4a:72:25:1e:5d:2f:4b:45:2e:52:14:6a:a1:
                    91:12:07:4a:d3:cc:7a:55:36:56:8b:aa:0b:68:04:
                    41:88:7e:83:21:6e:04:a0:19:88:76:3d:d2:03:eb:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:18:A8:13:1E:4E:CA:0E:B3:B7:D2:27:8D:D1:37:74:23:30:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8559af88-ce4d-3d92-90dd-7f225c9438c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:5a:bd:1c:f0:8c:fe:6d:93:eb:7d:15:81:3a:6d:99:73:
         12:5a:a1:e3:c4:fe:b1:d6:a9:b4:e8:96:4e:19:da:97:9e:62:
         80:d9:75:b8:f3:2c:a3:e2:88:76:9b:f1:b3:7b:79:65:af:20:
         39:0c:8f:ec:59:99:e4:a6:c9:0c:11:e4:cb:5b:74:b4:ae:b4:
         bc:a0:17:ba:f3:99:e1:4a:75:86:b9:45:30:72:c7:ea:8b:b6:
         89:7c:35:7d:71:61:27:8f:54:14:cf:9a:36:43:fd:08:2a:be:
         30:be:86:77:c3:f2:05:43:cd:21:49:4f:15:cf:73:bd:4b:c0:
         d1:d8:61:d9:20:0e:2f:52:73:5f:ce:1d:2a:9b:e4:1d:d3:73:
         0d:15:2a:a5:eb:4b:47:4f:72:8e:33:cb:cb:3d:e7:e4:e9:93:
         21:44:0c:81:82:18:13:03:e0:14:e9:d5:b8:d7:46:3c:e4:a4:
         c4:23:c3:df:ec:a0:bc:49:ed:65:49:76:f1:82:5d:bd:6b:2e:
         ba:2b:0d:8d:ac:1d:c8:54:5a:88:ac:35:76:46:b8:f4:ae:a1:
         0d:03:81:20:80:dc:cf:fd:20:8a:1c:4c:56:b9:cd:97:fc:32:
         38:f6:72:30:79:e5:29:5b:37:00:14:78:5a:1c:14:12:37:32:
         4b:0b:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:29:06 2024 by rpki-client on console-fra.rpki-client.org