Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
File:                     308feeb8-70f9-3009-aff2-80c008242007.roa (raw, json)
Hash identifier:          i+eHfjBeyj7rEIKGnAWtFcQcihjWgt0P/iWAVWKVNlI=
Subject key identifier:   6E:27:10:04:EB:B6:56:9F:77:BF:8B:1E:77:C3:FB:69:44:62:07:74
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847F584F5220FC5ADEFE2964780
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     28753
IP address blocks:        141.193.99.0/24 maxlen: 24
                          172.98.168.0/24 maxlen: 24
                          172.98.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f5:22:0f:c5:ad:ef:e2:96:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=fb6eaa05-3df5-45a5-92a1-153dbd5d858b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:1d:3c:51:f5:5e:b0:97:99:7c:68:61:23:
                    60:a6:af:a5:05:0a:1a:7f:d9:6d:66:08:53:2c:33:
                    b6:bb:ea:8d:a7:83:03:98:57:3c:da:d0:5a:85:60:
                    2f:26:7d:88:f7:8e:c9:80:6c:7d:e3:c3:75:35:a1:
                    cd:af:c4:1f:2c:c9:83:69:74:9d:0c:64:b9:8c:07:
                    06:0e:ef:5f:4e:71:72:59:6a:57:e5:0b:2c:2a:68:
                    5d:bd:97:66:cf:56:01:7b:7f:77:47:a2:88:2b:d6:
                    c1:32:02:58:99:44:f6:84:b5:d4:55:f4:e1:df:a8:
                    01:35:ea:86:af:ed:dc:73:2b:77:03:4f:61:1d:7d:
                    06:37:75:91:bc:08:13:79:00:b2:99:0e:b8:21:0a:
                    78:f9:fc:04:a9:de:a8:5d:97:b2:d3:91:55:b3:b7:
                    c7:d4:eb:4b:57:5d:86:a4:30:d7:f7:66:31:fc:44:
                    f7:b6:81:03:fb:93:86:b8:3b:35:89:ae:35:ab:7e:
                    4c:e8:1b:14:92:bd:d0:e0:ef:ca:08:65:0e:43:a6:
                    7f:44:ce:e6:12:9f:0f:0c:1a:61:ab:02:fa:a4:dd:
                    d2:33:20:4f:39:e9:91:86:c2:7f:17:d8:b6:d8:e7:
                    28:20:c3:b1:99:05:de:55:16:c9:90:c0:d2:2f:eb:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:10:04:EB:B6:56:9F:77:BF:8B:1E:77:C3:FB:69:44:62:07:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.99.0/24
                  172.98.168.0/24
                  172.98.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:20:7f:04:dd:67:3a:f7:35:a3:93:59:32:14:82:9f:f4:
         da:c5:84:98:43:38:0f:cf:74:75:f5:bb:8c:2c:93:4e:b4:7f:
         bb:22:5c:e5:91:32:31:2c:5b:63:7f:6b:6f:c9:ca:d7:d8:f4:
         41:0e:ae:cd:4d:05:61:3e:97:fc:95:8a:16:51:05:30:d8:39:
         1e:5e:cf:41:9a:80:1b:7c:f5:cc:fc:e5:57:3a:9b:aa:be:ba:
         cb:d9:f4:b7:04:00:f0:db:26:b9:26:ff:8e:08:06:92:a8:8d:
         41:05:33:c8:01:b8:f7:8b:e6:2c:e5:24:cb:a0:81:f5:63:54:
         cd:e3:f3:13:ba:e0:82:9f:52:df:59:2f:ad:76:95:93:a1:c9:
         8a:4b:22:0c:54:90:84:ce:f8:76:1d:05:b7:54:16:6e:8f:d3:
         c0:80:d4:1e:6d:9b:94:81:5b:df:49:2b:64:cb:8b:b5:82:2b:
         0b:7d:3b:0c:13:1b:c2:e2:64:fb:72:37:d5:37:bf:f8:43:dc:
         eb:15:67:3d:97:7e:8f:a4:15:88:6d:cc:f1:ce:f4:ed:3c:ff:
         89:43:09:04:81:76:c5:6a:a8:89:9d:fa:8d:b6:65:40:e5:3c:
         8f:88:8b:ef:56:36:80:32:c5:8b:7e:d8:b4:a8:e9:cb:51:60:
         28:6b:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org