Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa
File:                     8e80a925-2486-3f57-9efb-2870ff53ef11.roa (raw, json)
Hash identifier:          4bbTVjh58Sy1IxecNus1fecmFJ2J/1PDSR7Fe+YGLNQ=
Subject key identifier:   C9:EF:53:89:64:52:4D:61:91:79:70:CD:42:52:C8:77:1A:74:47:15
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2CA39B16B4D8F04FCDA00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        199.195.119.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ca:39:b1:6b:4d:8f:04:fc:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=4811efd6-a7ed-4f1e-94b1-ab4a535fe66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:84:cb:d2:a4:ff:9a:03:57:79:c7:89:90:
                    20:07:3b:97:24:84:1e:34:5e:35:fe:f6:ff:b8:73:
                    4c:20:a0:9d:32:e7:41:31:4b:8f:be:1c:e7:76:18:
                    27:96:ff:2f:1e:24:e0:40:42:cd:44:20:79:81:6f:
                    af:c0:be:42:49:fa:19:ee:80:fc:f6:22:21:5d:0e:
                    2a:3a:ef:27:22:ac:5d:fd:ae:e6:d9:62:4c:cf:a3:
                    28:4d:58:46:c4:df:57:cb:1f:1d:92:6c:60:25:37:
                    d1:19:31:91:36:9e:77:6b:25:fc:41:26:2c:ca:ab:
                    44:34:fa:1e:7c:d3:62:53:97:17:3c:e4:63:a5:03:
                    9c:11:4a:b6:ff:8b:55:03:b3:4c:ae:0a:9e:8a:41:
                    e0:c6:6c:8e:6f:e1:f4:cc:21:9d:d1:5c:c0:04:8f:
                    d0:d5:8d:1d:99:66:5d:36:35:fa:72:90:b1:0b:b4:
                    2e:06:25:66:3c:32:77:9c:a4:37:ee:a1:61:1a:6c:
                    76:94:3c:18:c8:4a:ea:7a:c5:11:17:ca:ce:d6:bd:
                    0b:a7:2a:68:80:dd:ef:9d:93:df:99:b0:cb:81:70:
                    f6:1b:dc:a2:4d:0c:bf:1f:d0:20:d8:1f:da:ad:8f:
                    48:83:ae:29:d6:fc:8c:d8:26:97:6b:d6:1c:4b:6e:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EF:53:89:64:52:4D:61:91:79:70:CD:42:52:C8:77:1A:74:47:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:68:a9:a9:83:c3:1d:79:11:05:95:ec:42:49:ee:fe:6e:62:
         71:4c:51:55:6c:2c:2b:8d:8d:90:59:93:f2:36:f1:2e:0e:f2:
         69:78:e5:62:53:1d:0b:7c:14:c4:99:c1:4d:e2:20:84:5d:fe:
         61:19:dc:fd:9e:89:c8:89:45:1a:09:a6:5e:fe:46:4d:5e:68:
         5d:c9:9c:82:47:88:6e:db:0e:8c:33:20:1e:a0:ac:f4:b7:bc:
         67:61:28:8d:94:7d:ec:ef:98:5d:57:8c:ab:bc:02:ae:44:93:
         61:f2:a4:59:eb:a5:71:e5:08:3e:6f:0d:4a:bc:8b:47:86:3d:
         27:98:35:01:10:98:b4:3c:d6:47:8e:52:1f:10:69:dd:c3:dc:
         8f:8a:ef:10:b2:da:e6:7d:86:bc:be:16:0d:5e:aa:6b:34:ba:
         9e:dd:29:24:66:b4:2c:8d:c5:37:d4:89:17:47:55:e6:fc:2c:
         b5:45:ba:a1:bd:34:e4:d6:51:cf:89:cb:c9:0a:30:b7:be:c3:
         24:20:5d:a7:08:ac:8d:1a:d6:ce:d4:9a:80:fd:b0:14:31:b9:
         81:c3:b7:9b:c4:9d:ca:6d:9c:4c:dd:78:cc:e1:6d:53:fe:70:
         2a:cf:72:d2:7b:5d:29:9e:e3:5e:97:f6:72:c9:13:84:09:6a:
         55:9b:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org