Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa
File:                     78fd81d3-f270-39b2-af62-f77ed2e55a28.roa (raw, json)
Hash identifier:          XTmH4GKK8/k3RNzZKN2nhyQCD52cwcHHcPhfiQ+gcwg=
Subject key identifier:   4D:45:6F:90:15:78:D0:0D:45:4E:03:EE:2F:54:31:4D:56:ED:1C:BB
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285847E62A2664C1B6692591995B00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     10737
IP address blocks:        199.255.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:64:c1:b6:69:25:91:99:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9aa0cf5d-e8f9-47c2-be5a-b5aafe441944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:97:2c:8a:9d:21:b8:7a:89:32:89:2d:38:cb:
                    e9:7f:e0:42:55:47:2b:c8:f8:eb:47:4c:1d:d1:7d:
                    21:b1:51:2d:6c:29:98:db:95:95:9e:51:b2:15:fb:
                    1f:96:87:ac:ff:e4:77:f5:f7:a9:70:47:63:2b:f4:
                    88:e5:9e:de:e2:38:92:d0:70:98:e1:2e:32:9d:4a:
                    db:97:33:87:3a:10:e1:1f:fd:4a:95:b3:c7:bb:54:
                    dc:4e:b7:c6:31:28:38:02:07:7e:b5:d8:f1:c9:fa:
                    85:93:c4:75:02:c5:5d:86:1f:73:74:47:fb:09:ce:
                    00:9f:09:7c:13:9e:e4:28:2f:9a:58:17:10:78:7c:
                    b6:15:35:6f:99:ee:7c:c6:b6:72:60:d1:56:8e:e3:
                    d0:b6:ab:51:05:e2:5a:31:6a:68:00:42:bd:14:a9:
                    c5:24:cf:e7:47:e6:66:e5:5d:08:cb:c4:2b:c5:36:
                    3f:90:ed:e0:8b:52:a7:cc:f6:02:68:e6:6a:55:08:
                    8f:50:49:1c:cf:6f:70:e2:e5:3e:c3:cc:a4:5b:fd:
                    d8:a6:df:78:18:ab:0c:2f:f4:dd:ef:b4:3f:d2:5b:
                    91:f9:02:7f:79:28:33:13:c7:9a:c3:5d:6d:4f:ca:
                    98:3b:6e:85:93:37:0d:79:bd:5d:5d:00:2d:68:08:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:45:6F:90:15:78:D0:0D:45:4E:03:EE:2F:54:31:4D:56:ED:1C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:80:69:a1:e0:90:62:82:7e:b9:e6:68:58:7a:4d:8e:bf:
         46:ca:10:c2:0d:2d:44:9a:b7:ff:39:7d:32:14:ec:1e:4a:2e:
         76:38:d1:90:74:f4:bf:02:31:45:69:d1:ee:ad:76:f4:d6:11:
         2b:b5:f2:be:41:ae:31:d7:8d:a1:23:91:ff:b7:52:c1:e6:f9:
         b3:49:51:48:81:5a:f0:c6:be:15:43:d4:31:7f:7c:11:a3:db:
         38:26:88:4b:96:a8:2c:69:3b:86:03:9a:d8:4b:34:73:98:93:
         52:bf:fe:3a:a4:f1:ab:d5:81:2d:a2:8a:67:9f:91:23:96:7b:
         2a:d2:c5:55:62:78:d8:0c:5d:c0:14:a9:92:e1:db:d3:19:42:
         51:56:16:88:a8:84:66:b1:2a:56:ce:c5:19:44:3d:b9:02:23:
         dd:40:ff:fe:b5:45:50:51:a1:0c:c0:7e:11:62:e7:37:2b:fb:
         10:72:5f:29:ad:95:f2:11:4f:bc:1b:66:45:59:7e:bc:34:bc:
         77:ca:56:68:02:93:19:97:27:77:9e:ee:6d:6c:1a:f3:02:c9:
         5b:ea:7d:e2:5d:3a:85:b3:65:f0:e4:1b:13:8d:a9:29:67:0a:
         df:aa:05:3e:f4:fb:3f:aa:98:63:c7:03:2c:a3:4c:cd:23:82:
         bb:5d:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:19:51 2024 by rpki-client on console-ams.rpki-client.org