Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8126492-006f-32a8-adba-70b76381a90a.roa
File:                     d8126492-006f-32a8-adba-70b76381a90a.roa (raw, json)
Hash identifier:          hs8uEPOxR7F9jZgz8BHrP0smFCZVerskUbgZTQa7S10=
Subject key identifier:   AA:B1:6F:C7:DA:7E:E1:0E:12:71:5A:3A:24:AF:88:32:01:68:F5:2C
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285847A744BC90D822BCE96939E980
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8126492-006f-32a8-adba-70b76381a90a.roa
Signing time:             Fri 25 Oct 2024 01:18:26 +0000
ROA not before:           Fri 25 Oct 2024 01:18:26 +0000
ROA not after:            Thu 23 Jan 2025 02:18:26 +0000
asID:                     62240
IP address blocks:        199.48.179.0/24 maxlen: 24
                          199.48.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:44:bc:90:d8:22:bc:e9:69:39:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Oct 25 01:18:26 2024 GMT
            Not After : Jan 23 02:18:26 2025 GMT
        Subject: CN=778547c8-98cd-4407-8973-bf17d804597d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:c5:83:62:e8:fa:c2:94:7d:df:46:63:b9:
                    8f:34:dd:18:13:c8:8a:84:b6:7f:07:fa:e9:cf:8b:
                    1e:67:c8:28:64:6c:59:39:a2:d9:9f:e4:f5:fd:df:
                    b7:c3:04:dd:65:1c:66:cf:3e:4d:42:e3:b1:49:87:
                    45:5d:4e:66:34:f1:c4:c5:c6:63:81:1d:0b:e6:3c:
                    3a:b9:76:31:8e:9a:3e:07:d7:18:66:96:8a:9d:88:
                    84:fa:76:d7:7c:f9:fa:9e:c8:a6:f0:11:40:05:04:
                    f6:fd:01:52:a6:4d:d6:9d:be:e9:26:37:e8:9a:4b:
                    de:f7:1e:a9:8b:78:d7:92:28:1d:fd:ff:57:34:e6:
                    d2:15:c5:e6:4e:91:82:04:cf:fc:c8:cd:ee:f8:b3:
                    20:a6:7d:e6:6d:4a:4e:08:29:df:aa:8f:ad:08:7f:
                    48:c4:24:06:87:96:f1:79:e5:b8:7e:46:7a:34:cb:
                    95:a5:fd:85:4e:52:8a:f7:41:34:f0:20:b1:84:e8:
                    8e:c4:7a:a7:56:82:fc:27:8e:59:f1:5c:ec:2f:1a:
                    79:d9:b9:b2:c0:57:72:04:0e:2d:26:df:ba:8c:b4:
                    a4:ee:be:17:b8:73:e2:10:13:46:6b:b8:80:5a:23:
                    89:a8:f9:db:15:a6:5a:af:11:fb:25:ed:02:ce:d1:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:6F:C7:DA:7E:E1:0E:12:71:5A:3A:24:AF:88:32:01:68:F5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8126492-006f-32a8-adba-70b76381a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.179.0/24
                  199.48.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:58:b6:7d:31:1e:b1:83:41:6a:da:2d:7f:28:0d:85:f4:
         18:f4:9d:98:31:62:9e:fe:98:65:96:4d:24:ef:d9:44:7d:d0:
         e9:2a:07:2f:c8:bc:d8:f4:97:fb:d1:70:e1:e8:31:ff:22:7a:
         96:d8:2b:fc:22:a3:24:68:2d:e3:f1:bb:51:6b:5a:ac:f7:49:
         b8:5a:3a:08:3d:8c:ae:05:3b:1c:1e:61:01:7e:bd:49:96:df:
         09:3b:d6:27:71:3c:fd:18:f6:65:eb:00:44:c6:35:2f:a6:54:
         ec:07:49:c4:c4:63:e0:9f:28:8c:20:ef:15:a0:f5:8d:2f:af:
         01:a4:53:9d:5d:55:b4:2f:2f:ff:3e:c2:ce:1a:14:7a:49:54:
         4d:f2:30:d6:ae:6f:d0:06:40:50:38:f1:c3:d8:4e:11:8a:b6:
         b4:60:dc:c0:87:29:7b:e1:76:58:28:a7:59:42:b4:c2:57:08:
         b2:2c:83:6b:df:37:01:7d:3f:d8:e5:73:33:9c:b8:1b:9b:c6:
         55:d9:ae:1d:13:31:c3:30:cf:d8:98:0d:e6:47:46:a5:24:a8:
         bb:ff:3b:76:32:82:1c:d9:53:b3:ae:9f:5e:72:76:5f:bf:88:
         3f:2f:2b:13:b8:9c:f3:9d:7f:e5:3c:9a:76:35:9c:cb:8a:ee:
         d2:45:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:08 2024 by rpki-client on console-fra.rpki-client.org