Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa
File:                     9faab904-6f65-3282-9b32-8d98d0475fc6.roa (raw, json)
Hash identifier:          CCKJ0OuIiizWXn8VpQL3auaXEbH4Cvxl5omU+aNhlQk=
Subject key identifier:   99:DA:6A:D5:91:33:45:50:0E:52:7F:6B:A6:83:4C:CC:D1:60:2A:05
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F432858479C11247705F218C4D85962E1
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     2055
IP address blocks:        199.190.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:24:77:05:f2:18:c4:d8:59:62:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=be23ce20-2526-48f2-80ec-dcb72cf4e901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:ec:75:c3:97:b9:55:95:54:1d:d5:38:9a:
                    61:74:f7:c0:f8:0b:15:0e:bc:2c:b1:f8:2b:11:9a:
                    7b:5d:ff:07:89:00:88:5c:6f:13:cd:aa:ba:9f:1f:
                    93:bc:84:ca:15:15:f9:00:83:68:2e:d5:1d:54:a2:
                    2d:66:04:3a:e8:5c:dc:a8:97:ed:02:ce:80:69:a1:
                    52:cf:14:6d:01:c0:f7:c7:20:e8:21:3b:b7:6d:74:
                    d6:0e:6f:de:30:1e:0d:7f:66:26:ab:5f:f1:84:ac:
                    2e:8d:9a:a8:26:c2:95:13:36:84:d2:32:c6:8b:16:
                    66:9f:a0:44:8f:45:65:ed:ee:cf:69:c6:58:dd:de:
                    67:b2:87:de:33:24:aa:8f:6d:84:5c:ac:ee:50:b1:
                    6e:3b:0f:20:32:19:ef:69:f6:af:47:7b:b0:33:55:
                    ad:02:94:ca:a1:79:af:b7:f2:55:07:80:d8:26:ac:
                    fa:55:22:32:38:34:0f:1d:06:ff:25:0a:e8:be:b2:
                    19:5c:f2:f3:c9:a2:eb:f5:39:da:53:86:8d:f5:20:
                    d2:de:bd:25:ad:ae:9f:4d:f9:01:2e:8c:1e:6c:84:
                    5c:d3:b9:cd:d6:d7:7c:67:50:79:4b:d2:52:d0:b7:
                    9b:bd:b3:75:d5:c7:a5:ec:45:4f:ce:f1:e5:a4:4c:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DA:6A:D5:91:33:45:50:0E:52:7F:6B:A6:83:4C:CC:D1:60:2A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:82:05:68:ea:10:8d:83:9f:00:66:3b:9d:e2:67:75:5b:
         93:36:22:38:33:88:2e:c3:db:e9:bf:dd:1e:c2:89:13:de:d3:
         9f:e1:fd:9d:d5:e3:6d:0b:0a:bd:b1:4b:d6:e3:df:06:01:fc:
         fe:d4:5c:17:5c:f2:29:07:85:c6:2c:9d:6f:0d:a8:98:5f:41:
         c9:51:44:51:38:dd:aa:b2:c9:82:a8:52:b1:0f:67:df:e1:30:
         28:33:c4:df:c0:42:e3:6b:08:4c:0c:5d:c0:91:ce:33:07:d7:
         0d:3e:63:a9:80:b7:bc:c4:2c:54:14:7c:2c:ea:3d:56:96:7e:
         d6:46:bb:9a:b0:e2:a2:ad:0d:01:a9:d1:39:6d:fb:bc:9f:ca:
         36:24:d7:79:07:c7:e8:4f:e0:04:4d:5e:8b:d4:71:1c:cc:fd:
         93:40:b4:29:e8:14:e1:db:02:cb:3a:e8:7d:d8:7f:84:b9:95:
         ac:53:9a:19:2e:fe:a8:51:cd:48:8a:db:f2:3d:e7:39:46:6a:
         da:96:1e:ba:11:df:c4:b6:45:05:3b:4b:69:96:7b:0c:a5:5f:
         29:be:69:a4:63:8e:1e:47:4c:d2:95:3e:55:9c:26:d0:e5:09:
         b1:db:1b:57:b1:84:b7:3c:11:db:20:58:b2:6d:78:8f:33:87:
         13:93:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:38 2024 by rpki-client on console-ams.rpki-client.org