Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa
File:                     86d52164-647e-3414-9ea6-46b394b0d1a1.roa (raw, json)
Hash identifier:          iG0sgDVk+WF9zKLKXUn/WbBPT2sFyE7P//jApDggVSc=
Subject key identifier:   73:3C:3E:AC:06:FB:C6:C2:BC:CD:C7:77:6C:A4:C2:AA:40:E3:E7:F1
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285847362B5143C537AA34DB9AA480
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     12259
IP address blocks:        199.201.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:51:43:c5:37:aa:34:db:9a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=99fe6012-5300-48cd-9f74-4e81c7653475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:78:08:99:89:8b:b2:d1:75:19:d1:a0:14:
                    25:94:25:0e:66:60:51:d3:f9:3e:66:8a:33:a9:98:
                    65:e8:1f:99:5d:76:1e:23:41:d7:11:a1:ac:68:2c:
                    5c:4b:5b:1b:98:3d:ce:50:2f:a8:ee:3e:20:38:a8:
                    40:1a:6c:81:83:41:9e:64:d5:6d:24:99:1c:48:f0:
                    fc:47:6d:f8:03:2c:a0:7a:5d:22:fd:8f:7a:dd:11:
                    a6:ec:16:3f:58:9b:a6:4b:6e:6a:26:64:e8:d9:0f:
                    5f:a8:5f:bb:b8:cd:4e:46:68:ac:ac:89:bb:d5:ff:
                    b7:c9:43:01:06:7f:9a:92:17:89:ca:2f:2f:70:0a:
                    40:7b:15:95:b0:e7:0f:90:50:41:50:4f:95:4a:f4:
                    91:a5:22:97:94:83:43:d9:d2:07:bd:08:55:70:63:
                    cc:35:11:d1:48:a0:b5:1f:eb:ae:4e:50:4a:cc:74:
                    ab:3f:56:e3:3d:1e:26:4f:ad:7e:38:4e:94:cf:9a:
                    ea:44:b0:15:0f:91:b0:08:62:63:99:d6:c5:f9:55:
                    9a:48:cc:e4:f9:c5:f6:93:72:75:8c:f0:da:74:d0:
                    98:04:15:a8:ee:61:b5:0e:52:ba:56:c0:2e:0d:e8:
                    00:08:a9:5f:eb:3b:38:05:4d:59:37:2c:60:85:6f:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:3E:AC:06:FB:C6:C2:BC:CD:C7:77:6C:A4:C2:AA:40:E3:E7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:05:e7:2c:5a:ee:80:47:6c:64:cc:1a:5d:e2:57:06:69:f7:
         5f:9d:d6:32:32:62:51:85:c1:40:4a:3e:57:79:da:b7:54:14:
         1d:f3:f2:f4:33:f9:70:1f:d1:dc:14:3d:c7:32:e2:fd:1c:be:
         bf:1a:69:26:c4:d3:eb:44:46:a8:f5:be:8b:d0:ff:8d:a8:76:
         76:63:e9:0d:0a:c5:94:76:bf:eb:56:67:73:64:58:62:43:7b:
         cb:fc:3c:3e:a2:bb:9d:59:1b:98:2d:8e:55:d4:bb:bd:6b:cf:
         7a:7f:7b:ea:eb:bd:58:f2:cd:f0:11:80:fa:68:22:c5:36:6a:
         aa:55:af:6f:73:0c:ce:39:2e:59:87:b4:21:71:75:bb:5c:68:
         8b:16:f6:f0:d5:a9:4a:63:38:08:1d:45:23:09:fc:0e:4f:53:
         b5:10:26:d7:49:e8:44:29:e4:3b:39:55:54:25:ee:4f:64:de:
         99:83:40:c8:60:9f:c0:6d:81:ca:7e:79:40:d1:d8:09:ed:d5:
         6e:32:12:d8:6c:6b:03:6c:a8:25:e1:e0:d7:cf:9b:09:13:03:
         60:a0:2d:3d:11:e0:bc:b0:68:bc:b5:99:38:ff:5e:0c:58:ba:
         ad:a4:f8:bb:f9:63:6a:c2:cf:e5:50:bb:fa:ea:b6:33:0e:11:
         ad:6f:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:51 2024 by rpki-client on console-fra.rpki-client.org