Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
File:                     5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa (raw, json)
Hash identifier:          P4H/7QswCv2bhbDSBuXrpMxZZGdH4hKx0fTod2F3X2I=
Subject key identifier:   66:0E:66:11:3E:32:85:7B:C2:48:E8:AE:C6:9B:91:C3:85:F5:FB:DA
Certificate issuer:       /CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
Certificate serial:       010D0C9F4328584767062219C5986070C8C42900
Authority key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     72
IP address blocks:        192.58.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:22:19:c5:98:60:70:c8:c4:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=fff27d58-3be9-4cde-b256-b11572d36f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:d2:9b:b2:69:0f:b1:f1:c8:ce:67:30:af:
                    cd:24:22:25:f4:4e:53:57:bd:db:6d:64:60:b5:e0:
                    7f:d1:f8:da:a7:46:b1:94:4e:8f:9d:2a:39:a1:6d:
                    a4:ed:fa:fd:6b:32:f4:97:0e:86:53:47:7d:5a:e7:
                    51:4c:71:5a:88:0d:b5:81:72:4d:8f:32:9f:b6:d5:
                    8b:ea:94:bd:2d:09:83:2e:88:3b:a8:cb:ef:80:09:
                    09:a6:53:45:73:01:2e:50:1a:b3:45:fe:36:52:95:
                    c1:ce:c9:04:5b:64:a3:79:ec:6c:d6:25:a8:bf:86:
                    c4:75:00:25:fa:01:15:25:e1:0d:41:2a:d1:7f:7d:
                    c8:aa:75:a5:48:b7:22:e8:52:90:c2:ce:f1:e6:1d:
                    b4:4f:a7:e7:4c:7c:54:f1:d2:f4:1f:b8:d7:e2:e7:
                    d0:70:9e:6b:6f:28:8a:dc:ff:57:e5:f3:c4:f5:fc:
                    a3:99:32:e2:8a:80:68:55:4d:0a:e2:6b:96:56:34:
                    a5:98:e8:62:f5:1f:16:4a:68:e5:c0:17:2d:e3:89:
                    66:5c:cb:a5:e5:b4:4a:d7:8d:d1:de:e7:b8:55:8c:
                    2b:d1:c1:94:c5:38:72:48:d2:48:4e:df:d4:01:f2:
                    47:26:c5:a2:29:6c:8c:0c:a3:e4:e8:6a:ce:bf:b3:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0E:66:11:3E:32:85:7B:C2:48:E8:AE:C6:9B:91:C3:85:F5:FB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl

            X509v3 Authority Key Identifier:
                keyid:BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:78:ec:a3:60:56:7f:19:c6:d0:89:83:bb:df:03:a1:9c:
         5e:d7:c7:59:5d:0c:76:7a:dd:d6:db:f5:df:97:af:72:39:6d:
         fd:b3:d3:3b:3a:d5:b1:50:b0:fc:23:7c:6f:31:bb:6f:a8:49:
         6c:f0:de:16:da:d7:6d:b9:b7:7d:e8:f4:5b:5d:39:f2:9b:fd:
         cb:3d:20:68:68:e2:75:08:be:ae:fb:f3:16:66:a2:87:c9:af:
         ed:60:43:39:b4:cb:17:18:d7:55:3f:8d:67:6c:95:37:19:d7:
         1e:b3:99:d2:d3:c1:7e:b0:5c:19:86:c1:98:53:0c:4d:90:c9:
         62:60:37:8e:ac:ce:f5:ad:26:b3:bd:05:da:93:aa:ca:16:b9:
         4c:c0:b2:b0:b7:3f:ae:f2:ad:bf:82:a7:5e:5a:e5:78:31:bd:
         5a:07:e8:79:bc:77:a7:9a:f9:ab:5d:9c:d7:23:16:ea:10:d7:
         eb:90:16:d6:d9:12:52:c9:7f:4b:cb:4e:b8:a7:2b:47:70:6b:
         51:0e:74:e5:71:91:38:8e:21:dc:8a:9e:b3:31:00:30:ce:b5:
         0e:7f:a8:62:88:86:9b:df:5b:13:32:eb:5d:41:bd:e2:39:2c:
         5c:c0:f4:bb:75:ee:f7:31:97:22:2e:81:30:12:66:1b:5a:2c:
         e4:0c:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:46 2024 by rpki-client on console-fra.rpki-client.org