Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
File:                     c6f25adc-65f3-3187-9117-8c56465b1980.roa (raw, json)
Hash identifier:          0fpTQfDt+FXIXuJIZOEqxs7O79gLmGQilCeh1/ecODA=
Subject key identifier:   2B:52:8B:17:9E:5C:65:E9:04:06:38:54:D3:5A:98:2B:11:24:19:B3
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584797E13175DB202EA608A39F00
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     395540
IP address blocks:        96.8.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:31:75:db:20:2e:a6:08:a3:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=15236f83-1350-47a8-a28f-f9da4539c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:4a:09:41:81:82:2c:6f:c6:94:c8:5c:6d:
                    dd:42:47:49:1f:6b:ce:2c:e7:97:75:c6:28:eb:9e:
                    b6:27:68:95:cc:f1:cd:7c:5a:e1:bd:fb:0b:50:36:
                    bd:7d:3d:e1:a7:ed:d6:f6:d3:f9:94:e7:3a:b9:a6:
                    95:ef:4f:df:5f:8b:ad:8f:94:ed:40:cd:43:02:45:
                    94:f7:bc:24:71:50:1f:c6:22:50:2e:99:04:5a:35:
                    59:7f:3e:6a:0b:00:46:1f:92:21:60:76:9d:47:84:
                    c6:7c:7f:e6:e0:3b:b4:59:e1:e5:dc:33:29:4c:cf:
                    52:bf:de:3f:eb:4a:57:e9:f7:a9:f0:26:7d:cb:a2:
                    5e:dc:d8:e8:51:ec:2c:5a:3d:1d:9b:44:79:c4:c1:
                    e8:28:7e:32:6b:98:35:07:c0:dc:6a:ec:16:8b:06:
                    aa:9e:1c:1f:56:e4:a2:46:94:a9:a7:dc:68:d4:89:
                    93:68:92:00:bb:b3:13:a0:f1:19:2e:90:f8:97:e9:
                    2d:6d:09:a4:71:22:d7:4b:ab:fc:d7:de:35:5f:5a:
                    3b:ba:45:6f:ca:6d:ee:46:bc:1c:01:ee:81:73:f5:
                    db:3d:3d:38:04:c2:a3:b2:e1:84:42:ff:c6:80:47:
                    68:e5:a1:1f:78:a2:14:4c:10:96:82:72:23:81:c0:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:8B:17:9E:5C:65:E9:04:06:38:54:D3:5A:98:2B:11:24:19:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:b4:0b:1c:b4:81:c7:77:e8:7b:b3:20:9f:49:f2:5b:e4:
         94:83:8c:2c:fb:a7:ba:db:71:96:e8:86:53:41:e6:1c:9b:1f:
         c7:5a:93:ec:7b:d5:ce:b6:00:86:38:87:eb:fc:87:9c:56:37:
         c0:9b:09:f3:db:bc:8f:73:64:6c:e3:b7:ee:6d:e4:d2:d7:10:
         8b:16:2a:6c:c1:94:0c:44:c0:a8:74:a7:98:f9:d8:5a:08:22:
         e0:1e:b0:b6:76:91:bb:d6:68:ef:4e:d5:98:84:75:9c:84:bc:
         36:3b:da:9d:08:5c:ba:ae:fc:77:a4:2f:2c:81:16:83:71:bc:
         7f:83:1b:76:30:11:ab:88:fd:92:f8:48:1c:aa:75:74:77:74:
         03:05:f2:42:2f:a1:40:49:fc:39:35:db:56:31:02:35:d3:bb:
         fd:8a:e6:ae:c2:5d:0d:b0:21:63:18:8e:be:2c:17:9c:f6:4a:
         94:fa:e1:82:cc:63:25:7a:11:6b:98:42:dd:68:af:f7:a7:5e:
         d3:55:fb:43:f1:25:f1:74:a5:41:4b:79:2f:6c:18:85:5f:72:
         94:de:e0:89:4e:dc:63:a6:af:27:76:65:da:2d:06:bd:1b:a4:
         13:e0:d5:89:c9:22:2f:e1:e0:a7:18:78:bf:46:0a:53:4e:97:
         13:82:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org