Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
File:                     78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa (raw, json)
Hash identifier:          awbiI6OjrKro9dPmIQf1vkirhPty+Po8q9MmJpqohqI=
Subject key identifier:   43:B4:13:E3:54:63:E2:48:12:C5:AE:35:09:FE:94:47:91:9C:E8:92
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F43285847A5D69C8B27D0B08A6D993160
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     394356
IP address blocks:        207.135.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:9c:8b:27:d0:b0:8a:6d:99:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=009990e2-0f44-4830-9fae-9abe1910c62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:0e:a1:dc:d7:24:f7:a4:d8:2a:29:cb:1e:
                    bc:60:f8:ff:fe:ae:12:54:63:23:b8:15:5a:f2:99:
                    99:00:4a:ec:62:98:43:81:5d:1c:ee:95:4a:9a:c3:
                    25:05:f9:21:3c:eb:e4:22:f5:6c:37:90:8c:40:22:
                    43:0c:61:fe:c2:c5:7e:71:ef:55:d8:be:dc:9c:bf:
                    62:eb:84:e2:fe:0b:ea:38:36:28:d9:62:82:9d:d3:
                    e6:55:cb:ec:d6:1c:ea:3e:4e:99:2d:e4:9b:f4:03:
                    46:14:fd:e4:20:d2:99:43:4a:47:6c:b8:4c:52:be:
                    35:70:53:ff:f6:3d:00:73:43:99:03:df:f4:43:4a:
                    55:18:7f:fc:b0:1c:af:29:fb:17:e5:78:fa:5a:eb:
                    75:ab:0e:6a:24:ad:9b:79:55:2b:4d:17:47:a9:ef:
                    3f:06:c7:c5:cc:99:98:ff:68:cd:a4:e3:26:b1:7a:
                    c1:1a:a3:43:ed:04:5d:3e:92:a6:e1:bf:58:7c:1c:
                    af:1e:1c:e0:67:6d:38:a3:49:19:35:20:42:e5:8e:
                    7f:fa:50:00:15:a4:33:29:b6:f1:0e:24:e3:52:09:
                    80:38:f0:bf:33:6e:94:19:23:07:1c:6f:26:32:d5:
                    c0:3e:97:c5:7e:9e:e3:a2:eb:56:60:55:18:10:14:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:13:E3:54:63:E2:48:12:C5:AE:35:09:FE:94:47:91:9C:E8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:3e:bd:e1:94:68:98:72:df:3f:9d:5c:33:d1:d6:0f:0b:
         c3:b6:b9:f6:89:d2:95:b3:2c:24:62:40:98:bf:84:e5:ac:99:
         10:aa:63:25:f7:00:67:56:04:b7:46:b6:60:88:d3:87:08:30:
         dd:31:3f:1c:71:92:09:a6:e7:8a:72:21:04:21:2f:84:d3:d9:
         bb:cd:66:0f:e2:5a:49:0a:84:ff:d5:d5:4f:19:89:8e:d9:62:
         c1:e1:51:b7:84:de:de:0f:26:56:6b:c5:22:ed:d3:71:5d:fb:
         63:74:fd:c6:d6:3e:31:f9:1e:98:2b:d3:6b:32:26:d0:6e:8e:
         6b:5f:2e:26:f2:31:8e:b4:91:e0:03:35:aa:94:ed:77:d9:eb:
         0c:84:30:53:7e:a8:f6:97:11:3a:46:2e:83:99:3d:18:16:45:
         c2:44:d4:4b:1d:76:bb:18:fd:e9:dc:48:54:1a:25:c6:ad:d6:
         a1:c3:14:7f:5d:5b:36:ca:e2:e6:df:42:73:3d:2a:10:fc:e7:
         2e:e0:3c:89:3f:f3:d1:7b:f0:09:a1:2e:70:0e:15:3c:58:8f:
         22:cf:68:d3:a6:ab:15:d1:5c:c9:22:3e:59:78:d9:b1:e3:b9:
         af:80:5f:dd:f8:81:35:af:bd:33:3f:eb:49:be:8a:f3:16:4e:
         0a:31:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:54 2024 by rpki-client on console-fra.rpki-client.org