Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa
File:                     96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa (raw, json)
Hash identifier:          2fLQ/9PGQGXCQOOnBHxwDoRkVnCzbAaTIa4K8jCLhZE=
Subject key identifier:   E1:35:D7:6D:C7:53:B2:15:73:B7:84:F9:F1:09:2E:50:95:43:6A:BB
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F432858471775C4B499B3F62499E8F960
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     396982
IP address blocks:        168.100.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c4:b4:99:b3:f6:24:99:e8:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=12bbc4cc-bcfe-4beb-89a4-469d9eedfe85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:3a:cd:68:fb:e9:18:01:50:72:dd:3a:34:
                    c0:ea:e3:18:85:07:f0:0e:07:ef:ad:2b:bb:cd:97:
                    9b:d7:74:5b:96:19:dc:c3:fb:5f:d6:f7:4f:56:b7:
                    eb:3c:ef:b4:c0:65:cc:b1:98:9b:1f:4d:2f:e9:93:
                    00:8b:25:df:25:f4:42:91:e2:5f:de:45:30:68:f7:
                    f1:ec:f6:14:00:36:97:29:de:4a:1d:e7:6b:47:56:
                    01:3d:53:19:29:11:fa:0a:da:35:40:20:84:f5:dd:
                    24:d8:f5:21:c8:fe:5e:16:f7:58:95:b6:b4:88:f5:
                    0f:b8:d2:9a:2b:dd:e2:75:32:7a:59:08:b6:5a:d5:
                    09:b0:27:f5:c5:f4:b3:7d:85:38:48:24:6d:ff:ca:
                    69:cb:87:5c:3a:cc:cd:78:08:a5:70:3b:a5:b4:da:
                    b4:50:f0:d8:07:4d:94:db:ed:97:12:59:5e:cd:ba:
                    1c:5f:5e:7c:be:f8:3a:54:0f:bb:61:32:8a:16:c1:
                    d4:93:26:b2:dd:de:a7:ee:02:8c:bb:b5:46:a0:08:
                    1d:b7:91:5f:77:9e:a4:f2:f1:0e:b8:21:7d:2f:db:
                    49:1b:d3:6e:73:a5:82:ce:bf:ce:50:4c:d4:09:65:
                    a1:6f:db:ed:6e:c2:69:0b:08:29:9b:87:b4:4f:2a:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:35:D7:6D:C7:53:B2:15:73:B7:84:F9:F1:09:2E:50:95:43:6A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:96:c0:af:fd:96:8c:de:c4:d4:a1:b8:43:9c:f7:4e:97:b1:
         83:c6:2b:6a:0b:4f:fb:55:76:ab:fa:fc:15:15:6f:f0:25:dc:
         d1:c1:f5:38:27:08:d2:09:38:af:e0:cb:dd:77:db:2e:8c:bb:
         9b:52:4d:f6:4b:14:7e:fa:8a:e1:7e:d9:c8:13:37:a0:d3:51:
         20:19:15:76:37:98:70:f1:a0:47:51:3d:af:92:95:18:b7:91:
         c6:7d:37:02:24:b7:0a:59:eb:07:40:b7:d9:a7:8e:29:04:05:
         12:c1:18:2e:f2:6c:7e:5a:d5:19:e2:29:25:9f:1c:98:67:f5:
         d6:11:d9:f7:00:9e:3d:1c:40:6a:f5:60:b1:8f:a3:70:63:b2:
         a9:77:83:75:57:82:fa:a7:0e:45:07:4e:5f:17:e8:c1:3b:e1:
         f1:d1:a7:26:7e:0f:e8:d4:8d:b3:76:96:dc:ce:94:cc:76:6f:
         0d:8c:43:77:70:bd:59:53:91:54:36:cb:a5:96:fc:b7:71:47:
         f3:cd:26:6b:42:35:cd:33:07:45:c9:ef:ff:bb:10:24:b2:7e:
         3a:29:14:a3:59:76:12:28:b9:4d:23:24:53:61:43:c1:c1:af:
         8f:77:d7:59:4b:cf:57:6d:b6:28:0d:ae:71:68:4c:d2:46:a5:
         db:a7:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:29 2024 by rpki-client on console-fra.rpki-client.org