Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa
File:                     3dad95c8-b382-3087-b45a-884e6286a797.roa (raw, json)
Hash identifier:          CCP24gO4cfiMSD61rDu6vrlwKWMfszjtpRwN+hFPQH8=
Subject key identifier:   8C:CA:B2:D0:83:57:3B:C0:67:A9:93:47:AD:2B:5D:47:8B:16:22:6E
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285847B3CC0379F35CBD97F9DF7610
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     1299
IP address blocks:        204.235.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:03:79:f3:5c:bd:97:f9:df:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=eb7726f0-e572-4a29-97dc-3259b56eb0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:08:51:a4:6c:15:78:ee:59:c2:c3:40:5a:
                    f0:bb:ce:c3:4f:eb:5f:88:84:e8:27:6f:31:2b:f1:
                    71:4f:e3:20:e0:87:a3:cb:50:95:79:d4:8d:2d:9e:
                    85:dd:32:a4:88:b4:8c:5e:b6:53:c9:7c:14:83:8b:
                    75:f4:07:e9:3f:a9:fb:01:25:64:2c:e6:40:ec:84:
                    f9:dd:32:88:e3:1c:e3:c3:04:4a:f4:2b:bc:ce:f1:
                    f4:35:1a:d9:b1:90:8f:e0:91:dc:35:bc:04:5b:00:
                    f9:62:98:e8:b9:a8:26:95:13:e1:89:8d:01:4e:04:
                    77:14:d8:c0:30:39:fe:9e:89:9f:6a:56:5d:99:90:
                    8e:ae:a3:02:1d:ee:0f:ff:83:8d:d2:d7:3e:3e:da:
                    6c:a4:a3:52:2d:08:9a:08:e3:15:ff:2a:4f:53:4f:
                    10:2b:c1:73:85:1e:ae:a2:ca:f0:bf:0d:01:b6:f6:
                    c8:0d:ff:6c:d2:3a:3d:a0:a5:7d:da:95:0a:55:ec:
                    ab:d4:8d:9e:41:5e:8f:60:59:88:e2:74:42:86:b7:
                    05:03:95:4a:b0:d4:b5:f1:59:23:d6:1b:1d:82:71:
                    50:7c:8f:90:c8:46:8f:30:ab:f4:c7:0c:4c:92:be:
                    22:15:38:15:ba:9a:23:5c:f4:9d:40:4f:28:ff:9a:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:B2:D0:83:57:3B:C0:67:A9:93:47:AD:2B:5D:47:8B:16:22:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:61:fa:0e:27:55:f6:b5:25:d0:e7:31:73:91:23:97:a4:de:
         ce:61:e1:79:70:a1:20:45:58:70:18:77:72:98:fd:43:9a:11:
         16:83:61:51:93:81:0b:32:54:90:4d:52:89:ce:bd:81:d1:26:
         4f:0f:40:80:d5:45:77:c1:5f:35:c9:f2:8b:90:86:0f:22:e2:
         fa:67:db:5e:d6:d4:63:fe:0c:2c:c0:76:72:6d:36:c7:dd:36:
         d9:b2:9c:6f:f8:4f:cd:49:7e:63:b7:a0:86:6c:3e:a5:72:b7:
         13:12:97:d4:57:3d:cb:b7:4e:34:f8:86:f5:88:8a:3e:f8:e6:
         90:2f:b8:d0:24:35:81:d7:56:2d:7a:47:7d:f2:8a:1b:e1:b4:
         30:9f:64:07:27:ae:77:dd:f1:72:ab:59:7f:17:a4:3b:bd:ad:
         91:ab:14:11:28:68:2f:52:ff:24:01:5c:44:3e:4e:49:61:94:
         28:e9:52:02:e7:fb:30:bb:b4:35:c8:00:52:49:bf:c6:98:19:
         3b:72:e7:87:41:bc:fa:f9:62:b2:39:17:03:8f:a2:ce:82:92:
         7f:63:f4:68:5e:9c:77:31:5c:d8:1d:e5:08:7b:3a:2e:d0:0e:
         a8:e5:23:55:20:26:5d:f2:22:42:27:26:e2:0d:46:04:4d:78:
         da:ad:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org