Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa
File:                     0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa (raw, json)
Hash identifier:          B0/sl3nT5sNOsQNaCJSkOHm//t7uEHTAXvA72Ete5ms=
Subject key identifier:   9B:73:A9:76:CB:75:5F:20:AE:B0:2F:CA:01:8A:CC:0B:C0:F0:B6:C3
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285847A30BEEE61141134D57AC0080
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     10958
IP address blocks:        142.214.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:ee:e6:11:41:13:4d:57:ac:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=2e3331f4-b570-47ec-bad0-7f81fecf6e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:c7:3e:7a:05:ac:e1:c9:a7:2d:93:66:ac:
                    89:07:7c:7e:f3:3b:9f:df:e0:80:e5:23:55:50:de:
                    79:93:09:30:61:4f:5e:f8:76:33:26:12:d1:d2:b5:
                    9d:da:67:d3:77:df:68:e3:fd:20:9c:df:79:a4:26:
                    f2:d5:2f:0e:08:8e:a9:7d:35:af:09:3c:40:ca:de:
                    6b:72:d4:84:e4:b9:10:51:73:12:8e:e8:e0:09:a9:
                    62:8d:72:1c:fd:14:e7:01:bd:dc:82:15:f4:00:5c:
                    e9:88:d8:2c:a9:2f:7c:d5:75:12:3d:e1:69:9a:f4:
                    71:a7:de:2d:23:fd:d9:bb:95:b4:59:2a:9d:88:e7:
                    c9:36:6b:e1:56:94:b2:ee:34:93:fa:2d:e5:d7:ae:
                    27:3c:7b:c3:53:82:f1:86:69:1d:ec:33:f6:f4:87:
                    63:51:0a:d2:87:d2:27:d4:22:95:a8:d3:44:3b:5f:
                    b8:9f:da:19:95:11:0c:15:28:0f:84:a8:e1:4b:56:
                    02:68:72:17:b5:02:a0:fd:0d:3d:62:99:68:ec:45:
                    c3:c2:ea:8d:6f:88:78:bd:96:72:17:2d:45:2c:23:
                    a1:38:21:5b:bd:44:50:dc:91:e3:fd:d6:e2:08:30:
                    f4:8e:10:43:89:ee:2e:a9:ff:15:92:85:0d:d8:ae:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:73:A9:76:CB:75:5F:20:AE:B0:2F:CA:01:8A:CC:0B:C0:F0:B6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:8b:9c:35:55:58:87:98:45:28:16:62:d0:88:d0:5f:68:
         cd:79:2d:7e:61:7b:fa:c4:82:bd:04:0c:f5:b1:33:50:51:38:
         02:6b:2e:af:16:e8:6d:d1:ba:8d:11:09:68:2c:63:1a:8e:33:
         65:f7:90:d1:27:13:1c:5b:8f:3f:0c:fb:11:ca:27:96:87:fa:
         0c:2f:94:70:3f:34:b3:ea:ea:3f:a6:b7:78:04:fb:32:9f:83:
         68:66:09:89:38:fb:09:7a:37:8f:3a:d5:d2:d5:14:c8:92:3e:
         66:6c:14:1d:2c:03:9b:60:ac:ca:13:33:fc:72:0e:e9:47:4d:
         0e:8b:80:a3:55:0f:05:72:18:49:cd:9f:0a:bb:c8:1e:73:d7:
         f4:91:fc:e6:28:5d:81:81:65:25:bc:5d:02:98:6c:3a:0b:9f:
         8b:63:07:68:cc:27:6d:1f:b9:6e:be:d8:57:cb:de:c8:eb:c2:
         a8:09:1e:3b:1c:5e:e0:34:8e:b5:0b:be:67:b9:65:f6:63:1c:
         40:ad:16:1d:88:e3:d4:64:1e:68:ef:fd:9a:fa:8f:0c:53:39:
         ca:cc:e9:83:a0:60:48:6b:af:6a:7c:08:9c:4e:e9:71:d8:a2:
         40:29:99:54:6a:f9:bc:ea:6f:53:c5:04:af:37:cb:06:0a:70:
         ab:1d:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org