Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
File:                     aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa (raw, json)
Hash identifier:          +H6H34Xjgh3jUU6BB/esRCCwCej03Ks9WFgdIpDhxsY=
Subject key identifier:   58:60:13:E7:F3:D0:EE:55:7E:13:64:1D:57:B2:A5:B8:41:DB:FD:5A
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F432858478CB68EB8F68DC66BDF2378C0
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     14203
IP address blocks:        198.186.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8e:b8:f6:8d:c6:6b:df:23:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=70036593-ab7b-4f34-9a7c-2d7dab78b772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:c2:09:a5:b8:23:07:04:33:a2:35:d4:e2:
                    37:d1:e2:b9:27:90:4e:f9:f5:53:b8:b8:ee:cb:a9:
                    b7:82:ad:e0:b6:6c:0b:fc:fb:0d:0f:2a:06:54:09:
                    00:45:ed:d7:fc:8b:6c:43:2c:39:96:9f:7a:db:94:
                    41:1c:ae:12:93:26:9d:ef:ad:b1:73:e7:22:0c:19:
                    1f:3b:af:cd:6c:68:13:df:5a:11:b1:e8:cf:e4:55:
                    86:56:79:69:13:7c:3f:4f:58:97:84:31:aa:60:fd:
                    17:77:38:28:aa:02:1f:4e:e2:d1:e2:54:b0:7c:06:
                    5f:ec:c8:6a:02:f9:bc:84:7c:14:61:5d:00:06:9e:
                    d9:be:1f:11:66:11:3f:22:40:72:fd:d1:8d:a0:92:
                    22:ed:14:b4:2e:50:65:a1:bd:33:91:48:86:90:00:
                    2d:80:91:82:13:f6:2c:eb:7b:9e:88:e3:53:a9:9a:
                    74:71:0e:88:97:3f:ea:af:fb:03:c6:c8:51:98:9e:
                    a9:eb:05:76:42:89:4f:55:e2:03:66:1c:d5:f7:3b:
                    16:58:36:40:b4:93:2a:9a:3d:5f:c6:0d:cb:65:de:
                    39:a6:c0:8c:d9:be:03:86:9b:3c:13:b7:d4:ff:63:
                    04:57:84:a9:05:f3:08:fe:d6:1a:70:b0:66:81:fc:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:13:E7:F3:D0:EE:55:7E:13:64:1D:57:B2:A5:B8:41:DB:FD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:43:82:16:f6:28:38:9d:ab:79:56:b3:d4:ef:5d:ab:0b:
         95:8d:84:74:0c:80:f8:24:61:d1:07:2f:23:52:93:66:46:73:
         5e:fe:84:02:2c:fd:bc:52:33:41:fe:2c:db:70:1c:f8:88:9d:
         ae:db:f7:17:96:4a:53:f4:a8:4d:bc:55:1a:b9:a0:23:91:c2:
         46:28:e2:c4:24:bc:6d:98:b6:86:e8:f8:f9:3b:79:d2:69:4a:
         4e:19:08:de:f0:04:4c:74:ed:81:cf:91:e1:62:d5:78:0c:54:
         f7:bf:55:96:4b:ae:05:3e:11:a0:98:31:ec:7d:f1:5c:ae:f1:
         6f:54:d4:0c:7f:e4:c7:a3:29:df:41:02:e2:d7:18:21:c4:60:
         d7:40:46:8c:46:a3:de:28:6d:f1:b2:b1:1d:4e:3f:ea:b5:c7:
         d5:ac:d1:ef:f6:da:61:c3:25:6c:b2:f8:38:a2:5b:4b:f9:dd:
         33:79:48:f3:e9:81:23:6b:5f:68:3e:88:c1:e7:8f:ff:81:b0:
         e4:1f:f3:31:06:40:46:95:7d:36:85:d8:08:dc:84:26:35:56:
         e3:4c:f6:a5:aa:8b:c7:37:6e:27:1e:f8:ce:0b:a2:56:f7:fc:
         51:50:08:dc:7d:2f:e4:d0:11:cc:79:05:a4:96:84:13:bf:f0:
         34:37:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org