Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
File:                     83ddce50-be55-3d3a-bc5d-6548146ba65c.roa (raw, json)
Hash identifier:          zLD0vPFw+lSNagCjcy8cP37hrEa/Y0WNOwVzgPPVfYk=
Subject key identifier:   C0:09:1E:78:2F:A4:6D:C6:9C:CB:E5:CA:24:83:62:B8:9C:6B:C1:06
Certificate issuer:       /CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
Certificate serial:       010D0C9F43285847B101589E4DA9F9880D94F100
Authority key identifier: D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     32413
IP address blocks:        199.83.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:58:9e:4d:a9:f9:88:0d:94:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=acfa060f-2007-42ee-9d22-ac3dcb720a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0c:6f:11:59:15:23:73:61:fd:2f:f2:42:f0:
                    d3:54:7a:d6:18:af:c8:71:01:04:80:a0:03:c6:e1:
                    12:3d:f6:41:af:55:f9:0a:41:32:f3:e6:11:77:af:
                    10:c2:99:8e:e5:15:82:ea:c5:ed:bc:65:da:d7:5f:
                    3b:e0:8a:d1:2f:08:ea:65:54:d1:37:2e:ff:ea:b5:
                    a5:2a:05:95:32:1a:ed:66:04:9c:7b:7f:ad:42:63:
                    25:0f:fb:a0:5d:68:25:99:31:4e:15:dd:7e:aa:33:
                    a9:97:8d:ba:9e:0e:96:bf:40:c1:0e:87:78:f9:c8:
                    6f:6d:0b:c6:fb:bb:cc:5e:5a:b7:da:33:b8:94:8f:
                    a5:22:80:2c:c5:43:1e:df:6e:73:d6:29:ff:b4:d8:
                    fa:cc:cd:b8:75:82:42:51:da:c2:7b:c1:11:f5:c8:
                    7b:e5:d3:84:c1:4b:3b:ad:20:95:0c:0a:41:1a:73:
                    70:f9:21:fc:a6:35:6e:57:52:db:4c:58:f3:b0:a4:
                    6f:e2:6e:73:50:1e:36:33:9c:e9:bf:16:90:7a:25:
                    2e:3e:eb:24:a9:1a:46:c6:73:7d:02:01:4b:59:e5:
                    13:d7:2f:a5:81:77:a3:41:48:95:e0:86:88:2a:20:
                    6d:31:79:54:b1:1b:f5:5d:4c:c8:39:3e:cb:8f:9d:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:1E:78:2F:A4:6D:C6:9C:CB:E5:CA:24:83:62:B8:9C:6B:C1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl

            X509v3 Authority Key Identifier:
                keyid:D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:2b:38:4d:c4:2e:dc:f7:0f:cd:43:54:30:f5:44:55:52:
         f8:ae:a3:d3:da:db:50:7e:6d:a1:da:9a:cc:09:97:6c:05:50:
         e6:2d:7d:80:e6:73:cb:9c:65:77:ce:31:31:eb:84:a4:2d:3d:
         65:d3:7f:bc:b8:ee:9d:1d:31:4b:23:c2:db:22:51:32:6b:56:
         87:ab:08:98:23:ef:b5:41:44:39:77:f1:7e:5d:5d:e6:98:1c:
         1b:62:3d:dd:96:99:00:c1:10:32:05:27:d4:81:e6:56:99:f2:
         19:60:83:7c:80:85:94:2f:bb:b2:21:27:cb:92:e5:5c:dc:76:
         0b:c4:b6:d2:71:7a:86:8b:d0:aa:67:4c:fd:00:2d:9d:74:cf:
         40:9b:20:49:37:aa:e8:e1:ca:5c:73:04:0f:e2:a6:23:77:8c:
         52:ec:ef:16:a6:e4:b0:ef:5d:ca:8a:10:81:98:1b:2d:80:4b:
         ed:95:1f:e2:44:9f:8b:0d:97:77:85:cb:c9:c5:54:24:7c:a9:
         e5:6c:47:69:17:7a:5b:9c:33:af:2f:46:9a:73:c9:92:4a:de:
         c5:a2:d2:d1:d2:cd:a3:ee:c5:80:c5:23:a2:9a:14:d0:f7:32:
         2e:a1:4f:29:bd:1c:00:6e:a2:a5:08:28:2d:55:77:32:7d:56:
         1f:42:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org