Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b49a973d-1b6f-3372-b11a-79f4cd52d0c6.roa
File:                     b49a973d-1b6f-3372-b11a-79f4cd52d0c6.roa (raw, json)
Hash identifier:          gXMCLuKAN+QFt/a/2M+EzP5qHQjgKPhozJW8kfhOpPg=
Subject key identifier:   2B:DE:C9:3B:DA:7F:CE:B7:D7:13:FF:56:59:76:64:98:F5:CC:F8:60
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858476B364238FE97BA27E6D75B00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b49a973d-1b6f-3372-b11a-79f4cd52d0c6.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     395963
IP address blocks:        205.213.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:42:38:fe:97:ba:27:e6:d7:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=82c42acc-f5f3-4e73-a08d-89e815582996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:a0:02:08:b2:b5:14:aa:05:68:6a:83:7b:
                    76:26:f0:d7:e8:8b:78:e3:ae:98:a3:97:80:9e:04:
                    b5:b7:74:c0:90:05:8d:9b:f6:8c:f0:58:68:bf:1b:
                    b2:c8:1d:12:46:dd:e4:36:f8:1c:b6:3a:95:b9:67:
                    90:51:f4:50:51:d0:7f:8e:b0:aa:8b:a8:90:d5:d1:
                    48:db:e8:c2:ed:f5:6b:e6:6f:cc:9f:c4:2c:6a:19:
                    01:1e:f4:06:ad:35:90:31:b7:a4:fd:71:c1:24:56:
                    46:98:a9:21:1d:ba:8e:84:6a:de:06:70:d7:d2:ce:
                    85:87:ba:06:c1:80:c9:91:50:79:ef:8b:11:1b:d0:
                    b7:10:27:80:c3:b5:0a:0f:cf:c7:0d:c0:76:71:3b:
                    a2:4f:09:1f:e3:de:fb:06:fb:d4:10:63:16:92:02:
                    9f:86:cf:bc:6a:e3:a5:9d:0a:05:67:8a:27:71:b8:
                    dc:be:a5:ab:da:ba:65:9d:fe:5d:65:e6:e8:b5:01:
                    b1:51:b3:08:88:4c:5c:57:be:03:7c:41:39:c1:e3:
                    ea:37:3d:e9:ee:4a:79:2c:01:27:39:c9:04:2d:a7:
                    2e:54:6d:93:1e:ad:f8:29:81:fe:d0:65:46:3e:e9:
                    d0:17:2e:4e:46:dc:b8:65:e2:39:6f:0c:09:12:01:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DE:C9:3B:DA:7F:CE:B7:D7:13:FF:56:59:76:64:98:F5:CC:F8:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b49a973d-1b6f-3372-b11a-79f4cd52d0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:f0:a1:79:74:4f:30:d1:5f:4e:8c:64:2b:9b:94:a8:23:
         da:40:d0:4e:da:53:49:09:0c:86:d2:4e:0e:57:d4:6b:eb:7e:
         98:41:b9:0c:6b:de:25:4a:8d:ea:9e:e1:22:85:5e:14:5e:53:
         ff:af:30:75:5b:2b:12:19:1c:c5:ee:7d:fc:4b:50:18:49:5e:
         99:7c:a0:b8:16:45:03:29:bc:af:35:3c:6a:cf:cb:a4:5e:90:
         30:fa:cc:62:15:ee:e8:40:fb:c9:0a:67:83:dc:4a:70:4b:5e:
         39:16:94:c7:38:c0:d0:34:94:05:e5:02:79:5d:fe:eb:e7:7e:
         78:3e:ed:84:aa:ca:16:11:47:58:de:71:5b:1e:77:3b:43:c4:
         b3:69:71:d5:d1:00:8e:b7:b1:a4:e4:97:76:e0:a9:10:a0:4f:
         be:57:7e:26:d7:94:d4:4f:7b:70:4b:45:93:68:9d:d9:b5:80:
         ac:f1:23:fe:0e:95:ad:2c:f6:3c:25:4c:cf:93:bd:44:98:57:
         6e:af:d5:bd:dc:91:32:96:c6:3c:57:19:da:89:50:ec:d2:31:
         d7:ec:05:72:86:3d:e6:10:bd:0b:ab:02:75:dd:be:32:3c:99:
         2f:d0:db:a6:6d:f3:72:81:2e:3d:94:67:e8:a5:58:05:51:04:
         d7:b5:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org