Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f693260c-b888-3dda-aad6-34db24fb77da.roa
File:                     f693260c-b888-3dda-aad6-34db24fb77da.roa (raw, json)
Hash identifier:          pv9OSJza+Jfd9hJjsePgchvcpyvG30v/IgTeYOC6Gpc=
Subject key identifier:   DA:23:66:A4:B0:B1:63:C6:0F:4B:51:91:BB:33:3D:95:36:AE:46:FD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DE4C92F65D81BE343E8ABC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f693260c-b888-3dda-aad6-34db24fb77da.roa
Signing time:             Wed 13 Nov 2024 18:23:41 +0000
ROA not before:           Wed 13 Nov 2024 18:23:41 +0000
ROA not after:            Tue 11 Feb 2025 18:23:41 +0000
asID:                     202
IP address blocks:        192.57.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:4c:92:f6:5d:81:be:34:3e:8a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 13 18:23:41 2024 GMT
            Not After : Feb 11 18:23:41 2025 GMT
        Subject: CN=fbc0f5d0-e1c3-4951-bd53-daa4387cf2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:0f:d2:18:a5:8c:bc:3f:2a:76:3e:ac:b0:
                    14:df:da:fa:55:81:c1:fb:30:64:5a:72:e6:64:d7:
                    59:d6:7f:3d:40:8f:eb:0d:a7:82:1b:4f:37:fb:b6:
                    88:e3:4b:59:34:27:07:f6:4d:a5:d6:8f:19:84:6c:
                    7e:ca:f7:84:76:c5:9a:7e:1c:b5:3b:67:4d:28:72:
                    d2:9a:ac:26:a8:b5:62:31:43:99:33:28:d3:bd:cc:
                    38:b5:4b:d6:05:79:ad:4d:00:94:dc:9d:3f:05:6d:
                    93:13:84:70:9d:90:1c:0c:a3:ec:cb:16:8c:8d:bb:
                    cc:75:ec:7f:5a:b4:2e:a5:8e:3a:d1:f4:8a:d3:50:
                    fd:aa:f2:7f:e2:8f:74:f9:69:b8:12:28:bb:ca:93:
                    41:97:17:1c:10:00:50:e2:a9:8d:00:5f:a9:cf:6c:
                    08:15:01:5e:61:66:62:54:ca:f1:36:cb:07:3c:7c:
                    e2:e8:f6:5f:6e:13:1b:9f:89:c7:a5:e9:3c:63:6b:
                    1a:c2:cb:e2:18:cc:f1:ae:0b:55:a2:f2:4c:f0:c7:
                    f5:90:2b:e9:7e:81:02:c9:c0:5d:b4:e5:73:49:75:
                    4f:dd:46:fe:4f:ee:3e:c1:0f:6c:9e:54:2a:fd:82:
                    60:8f:e0:c8:4a:1c:30:0a:f0:01:9c:4a:05:8e:39:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:66:A4:B0:B1:63:C6:0F:4B:51:91:BB:33:3D:95:36:AE:46:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f693260c-b888-3dda-aad6-34db24fb77da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3b:53:b8:17:37:c7:c5:00:b8:71:18:97:11:2e:b4:4b:83:
         ea:f5:c2:5d:c5:55:19:09:60:aa:14:49:a1:33:2f:6c:0f:ba:
         0a:19:79:e7:ca:dd:8f:dd:3e:44:ab:71:9b:2c:d4:96:2a:e3:
         b0:72:82:a1:35:6f:18:cf:ba:56:ed:cb:75:9b:3b:3f:d5:f1:
         c2:ff:42:05:e8:55:ed:85:c9:5d:69:f4:c2:ca:cf:36:70:b7:
         e0:39:ad:a4:d6:67:8e:47:0d:d8:bf:0a:77:72:dc:9b:70:9f:
         06:b7:67:56:5f:21:4f:24:e6:77:ac:7b:c6:b9:4d:47:02:3c:
         aa:63:38:90:30:b5:33:34:2b:7a:51:04:2c:cd:2c:04:3b:7f:
         64:c5:ed:df:a7:de:7e:16:d7:05:54:26:ea:d9:13:a7:f5:38:
         91:70:6d:79:8f:3f:a5:be:28:b3:c6:68:eb:cb:64:1c:d9:44:
         98:29:c2:34:00:68:28:2c:b9:3d:ab:da:f4:03:10:9a:00:22:
         9c:9b:ee:0b:1e:b0:9e:35:50:88:18:24:0f:a6:7e:32:c9:90:
         1c:77:9a:19:5c:dc:2d:ea:87:27:ab:35:fa:eb:c2:01:35:71:
         b1:85:b0:ba:7c:d3:99:4c:40:7d:00:5f:cc:ba:6d:f3:d9:a9:
         f5:74:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:46 2024 by rpki-client on console-fra.rpki-client.org