Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa
File:                     479fd856-d95a-391f-870c-32bdb61c6240.roa (raw, json)
Hash identifier:          Ou/sdQ2g/TFKJSkJDSx+UEEMxpt9MsUuv1Daqnq1390=
Subject key identifier:   2C:11:A5:68:7A:33:18:FF:EF:00:D7:28:2D:DF:0C:70:48:01:FE:6D
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858458C6DD29FA0BB839C5CD64E40
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     399629
IP address blocks:        193.149.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d2:9f:a0:bb:83:9c:5c:d6:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=e1bac7cf-07d6-432e-b691-86772924d5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:06:11:d5:bf:42:b1:9c:a7:db:3f:a1:9e:
                    a0:3e:12:48:93:3f:a0:46:9d:46:7e:6f:06:0f:6f:
                    e5:f7:30:28:68:7c:32:8c:12:80:f6:f5:e2:e1:6a:
                    1d:f9:42:a6:46:38:eb:04:e1:5e:77:f9:22:35:ab:
                    cb:81:02:39:ad:17:d9:0b:14:e9:62:ab:23:fd:cc:
                    b1:e8:91:39:da:ad:b6:54:94:a3:93:e9:04:ce:26:
                    95:36:fd:df:b2:f2:69:3e:cd:5a:90:db:d6:59:d9:
                    f5:59:8e:36:57:69:e1:4c:68:24:96:34:67:b6:d0:
                    ec:e2:14:33:30:38:39:26:b8:24:f0:06:cd:af:1e:
                    45:97:c9:0c:19:3d:50:59:94:59:16:33:89:58:24:
                    56:17:ce:e4:30:ec:c2:a8:43:06:1f:bf:b0:a7:95:
                    62:92:db:1c:77:92:e7:b8:b7:42:3a:e7:1f:04:40:
                    ae:83:10:a5:86:34:fc:39:f3:cd:c8:0b:8a:e2:09:
                    dc:20:3e:7d:3c:dc:65:54:59:1a:da:bc:61:02:9e:
                    06:71:0c:53:e7:7c:19:65:ee:e0:18:57:23:1f:db:
                    71:40:64:7a:40:61:ac:1c:09:9b:d3:33:82:16:0e:
                    1a:93:0a:33:3c:46:f2:ec:43:be:19:6c:a5:f7:e9:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:11:A5:68:7A:33:18:FF:EF:00:D7:28:2D:DF:0C:70:48:01:FE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:71:3c:51:ae:ff:4d:26:12:92:b4:33:06:20:5c:a0:0e:
         ba:e1:5f:25:54:98:3c:0f:e0:2e:41:19:84:e1:d7:7c:39:ef:
         4e:ac:af:9a:15:4e:23:f4:41:77:51:ae:72:45:57:8d:bb:a1:
         16:d7:6e:d3:3d:e1:c2:99:95:73:55:d2:dd:24:d4:06:99:f3:
         f3:fd:59:1e:64:e4:6f:1b:77:b8:b1:fe:3f:98:36:a6:ed:c2:
         56:18:42:97:11:a6:a8:9d:da:17:b7:c7:47:2b:77:25:be:28:
         17:70:a5:6b:40:2b:0e:68:f3:58:1a:dc:32:a1:17:84:ee:fb:
         3f:5e:ff:42:5e:ef:d3:53:46:e6:4e:70:d3:ff:9d:96:95:a5:
         5e:22:28:6a:07:4a:f0:6c:6e:46:9d:13:aa:13:58:a1:17:22:
         d4:de:c5:46:cd:35:df:3c:c9:23:e6:de:a5:ca:f6:49:5f:4c:
         54:53:30:cd:6a:e3:75:2f:26:f7:29:eb:a2:02:72:62:04:3e:
         f2:89:55:41:84:0b:72:c5:4f:e3:71:72:bf:5f:9b:8e:fd:e0:
         ac:d3:21:6c:8d:48:6f:f7:bc:85:4f:d7:60:6c:dc:ef:9c:6f:
         e7:17:58:9c:47:37:e0:46:1c:75:e6:db:8f:69:8f:83:fb:3b:
         46:03:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:26:54 2024 by rpki-client on console-ams.rpki-client.org