Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
File:                     daab1a35-5ba6-3617-8f32-534a11d5dd38.roa (raw, json)
Hash identifier:          FJulfi6HxzbGTeKjJdGRwPqyNzCzxqAL3UVC3DHziSc=
Subject key identifier:   7F:33:67:AD:01:3B:6E:53:E4:80:CD:4E:C1:DC:B6:43:87:63:DF:AD
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F43285847C8D9E4F55606635BC5426CC0
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        192.84.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e4:f5:56:06:63:5b:c5:42:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=ebb1589e-e379-4199-a357-0fea00792e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:dc:f6:36:92:99:1f:64:35:c0:0f:28:d8:
                    b1:84:14:ec:d4:6e:15:ed:50:bf:62:be:f6:55:49:
                    c1:3b:94:04:10:aa:2c:60:93:1e:56:5d:71:16:fc:
                    f5:fd:22:a2:99:af:82:59:92:71:c7:71:a6:55:96:
                    4a:fc:db:9d:2f:a3:6c:c8:59:f5:04:f9:c5:b9:52:
                    0c:94:73:f0:4e:33:9a:6a:ee:dc:ba:c4:c2:c3:a8:
                    e7:c5:f9:c1:1d:bd:a4:4a:b4:3a:ee:e9:a5:81:04:
                    ff:59:e9:d9:89:48:6b:36:26:5a:c9:6e:36:6c:7a:
                    26:5a:a3:89:25:36:6f:4c:8a:93:63:ce:57:de:ed:
                    b4:31:57:08:ad:9a:0b:1e:c6:f2:0e:8a:1f:88:f0:
                    76:d0:d2:01:2f:55:24:44:2f:d7:31:59:6e:25:97:
                    ad:ee:af:41:0f:bc:a1:e6:de:1d:fd:76:cb:99:86:
                    1c:9e:8e:ad:b8:bd:4d:83:dd:7d:f2:0b:fa:7c:45:
                    77:01:52:53:7a:94:83:b0:5b:55:93:cd:4a:03:2d:
                    b1:be:cb:47:5c:08:23:b5:3f:3b:7e:d3:0e:2a:08:
                    37:76:5b:e4:7f:fb:ff:4b:71:d4:24:e0:d4:3f:6f:
                    19:1f:23:99:4b:4e:77:0b:4c:cf:a3:e2:3f:37:1a:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:67:AD:01:3B:6E:53:E4:80:CD:4E:C1:DC:B6:43:87:63:DF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:63:49:92:f2:34:e2:ff:6b:9e:8f:61:e1:60:dd:bd:d6:c1:
         2a:f3:13:65:a5:e1:d1:c8:57:a2:47:ff:4c:0e:8e:98:03:43:
         32:5b:c1:af:0f:8f:bb:19:48:aa:4b:8a:87:ce:24:7e:de:a0:
         d2:4d:59:e7:2a:20:de:1f:ab:aa:6f:a1:ac:6a:e5:03:b3:9d:
         2c:96:93:b7:80:35:b3:f6:3b:cf:44:26:41:6f:29:ab:fb:fa:
         df:06:0c:83:1b:34:36:e4:7c:3a:8f:23:54:b4:5c:4a:fa:49:
         8f:b5:5c:57:2c:2a:d4:5b:1f:06:d1:ee:9e:12:37:cb:81:67:
         b0:6b:f7:4e:08:9c:d1:86:66:8d:a8:4c:1a:dd:2f:e0:ce:45:
         1d:aa:7b:c2:b3:a5:70:3e:30:60:67:96:84:b0:5b:8a:05:3f:
         e7:d1:90:fb:30:f3:67:73:ad:6a:0a:b3:2b:b3:46:db:d0:44:
         37:18:58:5f:42:77:ab:ac:60:54:ba:f3:ee:6e:fd:0f:3f:eb:
         b1:26:a0:5b:d6:86:c3:d9:9e:41:42:3f:3a:7b:9c:2e:49:55:
         85:7e:46:e9:87:bd:9b:4d:c6:dd:9c:ef:7c:1a:f8:fc:51:66:
         26:a3:64:30:63:6d:a3:de:0d:65:71:c6:5a:32:d2:16:32:f9:
         c9:f9:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org