Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa
File:                     2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa (raw, json)
Hash identifier:          L+lBAe9zYXuSbpZMF2diV1J4mXi6ROoRS+wXCqrVA8Q=
Subject key identifier:   35:4B:D1:FD:7E:AD:78:2A:D9:CD:0B:D6:A2:C3:DB:AC:6B:E2:9F:34
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DAFCF3D618D948C51EA81980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa
Signing time:             Tue 12 Nov 2024 13:55:50 +0000
ROA not before:           Tue 12 Nov 2024 13:55:50 +0000
ROA not after:            Mon 10 Feb 2025 13:55:50 +0000
asID:                     3360
IP address blocks:        192.57.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:fc:f3:d6:18:d9:48:c5:1e:a8:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 13:55:50 2024 GMT
            Not After : Feb 10 13:55:50 2025 GMT
        Subject: CN=07b7e1b2-03c7-47c4-afe3-4760b042baef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:ea:e3:b3:04:07:a1:74:53:b0:1a:e9:43:
                    ca:4f:d9:e3:57:42:bd:49:a5:2f:e5:fa:0f:56:83:
                    f8:54:a5:de:74:c4:14:10:35:62:04:15:bb:3b:84:
                    54:2a:b9:44:15:66:6a:c2:68:71:a2:a5:de:f7:9f:
                    e3:17:88:f7:e5:f5:81:d7:57:91:68:6a:4e:3c:13:
                    b0:92:a7:be:27:28:d5:8c:f1:78:d9:f4:3f:f2:f7:
                    7f:3b:59:ec:ac:5c:f6:01:a1:88:0c:88:2c:bd:0f:
                    84:46:4a:ab:ed:42:1e:fb:29:6b:82:cf:ed:5c:08:
                    00:04:9f:09:b1:59:b7:86:73:e2:bb:2c:8b:59:81:
                    bb:c8:1e:ff:a4:ca:95:ed:ba:aa:71:09:ce:50:66:
                    44:ee:db:56:e1:0c:f8:14:69:9d:39:c6:74:04:49:
                    88:6a:5a:13:78:c3:04:c8:2a:91:56:42:3c:99:3f:
                    5b:93:52:61:74:e6:ed:34:7e:77:1f:cf:67:95:6a:
                    f7:34:69:29:30:07:61:20:d8:09:71:a2:a2:26:d6:
                    b7:04:5a:58:b0:73:d6:d1:44:4a:d0:a1:9f:b2:a7:
                    d4:95:76:9f:50:af:65:88:9b:cf:2a:b4:87:f1:6f:
                    d2:6a:9a:ce:b4:31:8b:2b:a4:5c:8d:2f:07:bd:ee:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:D1:FD:7E:AD:78:2A:D9:CD:0B:D6:A2:C3:DB:AC:6B:E2:9F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2411ce27-c6f2-3cfd-8fdc-2a6b407f8824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:4d:a3:17:25:f3:72:7e:aa:54:08:7b:78:5a:16:c2:a1:
         ea:6e:2d:17:66:02:67:69:cd:9d:0d:b5:92:a0:24:dd:f1:db:
         8e:b6:d4:48:a5:38:8c:73:53:f7:c6:3c:80:95:b1:3d:c0:11:
         36:2b:b7:44:51:21:ac:74:ad:c2:f8:55:8b:b1:c0:c8:29:22:
         62:22:6c:93:13:14:cb:e8:f6:29:6f:6f:21:06:72:ad:d8:f9:
         b1:35:4c:be:c6:4f:69:5f:a1:01:05:ea:71:03:ab:88:39:24:
         1b:4a:35:47:18:17:87:b2:b8:ed:29:e5:98:ab:99:3b:63:d6:
         3c:ac:95:68:74:f1:fd:fa:26:69:19:ae:db:bb:93:d0:ae:4a:
         08:f5:ea:8b:5c:45:82:65:0b:6d:68:c5:21:39:4b:07:52:18:
         83:74:90:1c:85:6b:3b:9f:3f:39:f9:f9:4c:39:e8:17:63:d7:
         e4:29:6b:fa:3b:db:e0:32:c5:66:10:b8:e6:56:c1:1e:25:1b:
         c7:65:d3:ab:eb:7e:e6:03:14:25:41:f8:9d:e0:ea:58:6b:6a:
         b5:5f:5f:20:eb:b9:72:8c:91:df:2a:2e:9a:e5:9d:2a:bb:74:
         03:4f:91:f2:96:84:97:2f:c5:89:13:20:06:55:a6:40:10:bd:
         c2:a6:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:43 2024 by rpki-client on console-ams.rpki-client.org