Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa
File:                     a8264f91-ff34-3e37-b258-e648975f9cce.roa (raw, json)
Hash identifier:          i78Y4P+wGGyGklZi+6YHHL3BRSxe2vsUYOsHF8wib9s=
Subject key identifier:   3F:55:27:C5:84:AE:79:1A:4F:9F:BA:32:F4:78:FE:92:CE:17:D9:4B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846D30FD885A98AFCFD911FB300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa
Signing time:             Sat 10 Aug 2024 01:00:28 +0000
ROA not before:           Sat 10 Aug 2024 01:00:28 +0000
ROA not after:            Fri 08 Nov 2024 02:00:28 +0000
asID:                     1239
IP address blocks:        199.182.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d3:0f:d8:85:a9:8a:fc:fd:91:1f:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 10 01:00:28 2024 GMT
            Not After : Nov  8 02:00:28 2024 GMT
        Subject: CN=4f4c5ac4-ca77-4b03-8830-368a47043d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:c8:19:05:46:fc:cd:e9:b5:c9:a9:b1:db:
                    7a:5c:85:44:02:d5:d1:7d:83:91:d0:f3:fd:1f:71:
                    d5:d6:25:77:7f:d4:e2:d6:76:10:32:5a:25:01:83:
                    5c:f4:a6:95:42:fb:f6:57:d8:0d:f1:fa:a5:ec:3c:
                    1a:a5:d7:14:d2:2a:dd:f3:d0:2e:9d:d7:13:1e:1c:
                    74:e0:31:e0:ff:c9:9f:24:32:70:7d:d9:36:c5:9c:
                    92:f2:19:47:f7:72:88:13:88:cb:8d:c3:27:9c:67:
                    df:3a:b1:31:45:d3:7a:6d:fa:89:ec:ce:1d:e5:1c:
                    b6:66:76:0e:0e:00:2c:01:f7:a3:32:07:ee:2a:80:
                    47:24:12:11:68:65:d9:18:56:d2:c1:ac:c8:88:2d:
                    dd:a3:14:57:96:63:22:79:a2:57:0b:89:2b:0a:47:
                    66:0e:31:89:c5:a3:d7:a4:30:09:56:aa:db:41:af:
                    64:56:3a:58:97:44:27:88:a6:51:d2:27:04:cb:f7:
                    41:5a:41:57:22:c5:48:fe:ac:ce:18:63:b8:4c:b8:
                    93:c4:0e:71:01:d5:6c:ec:ec:c0:71:90:42:cf:b6:
                    bf:44:a0:56:6d:48:43:6e:00:45:c7:16:d6:d3:49:
                    2f:e1:15:24:1d:9f:88:35:60:81:85:61:f9:58:e3:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:27:C5:84:AE:79:1A:4F:9F:BA:32:F4:78:FE:92:CE:17:D9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4c:9d:3f:9e:27:2c:f3:7f:31:2b:b2:a4:4a:b1:68:9e:52:
         d4:09:4f:1b:3d:50:94:0e:36:7b:7e:4b:ca:0f:b1:40:43:b0:
         4d:2b:84:a7:61:50:d4:bb:aa:d9:3d:5f:b3:86:ae:04:c6:a3:
         d4:99:e8:e2:41:6e:00:da:58:92:fc:4a:30:7b:10:bc:7b:5d:
         02:0f:67:c6:88:2d:f5:01:47:0f:c9:aa:20:5e:3f:3a:40:c6:
         11:e7:d1:86:a9:1a:1d:f8:e0:b4:c2:66:42:cb:46:58:c5:24:
         e2:a5:e1:0e:c4:dd:1c:6d:65:82:62:c3:96:bf:86:1e:4d:b7:
         b2:eb:ad:94:3a:c4:d4:d5:c1:8a:88:f3:69:08:29:67:4c:7e:
         19:e8:f4:aa:11:81:05:88:16:b6:6f:7f:bb:3a:46:69:34:79:
         0b:db:ec:55:db:26:e2:2a:bb:50:e0:f5:1d:ab:f6:f3:c5:c0:
         8b:9e:3c:43:69:0c:7e:d1:8c:49:c8:1c:e2:d0:25:44:47:57:
         87:fa:18:21:64:4b:b4:20:f8:de:58:8d:66:74:af:52:3c:9f:
         94:11:a0:30:4c:40:b1:39:c7:54:5c:46:40:6d:e5:fa:8f:07:
         70:30:13:48:7f:9d:3a:ba:36:6b:76:43:b6:aa:97:6c:35:e1:
         9c:70:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:19:00 2024 by rpki-client on console-ams.rpki-client.org