Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa
File:                     2e0efa81-cacd-3e96-8012-69bb025d6e27.roa (raw, json)
Hash identifier:          hwSEyCRsOPmXWxB6cR+jCwlP46XXTVPckBRR1IRHyK4=
Subject key identifier:   EB:71:3F:8A:8E:F5:1D:AB:CF:F3:6A:65:46:C5:EE:01:C0:F5:10:D0
Certificate issuer:       /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21
Certificate serial:       010D0C9F432858473FF08E2A5631DE2CA93A9E80
Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     16509
IP address blocks:        192.245.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:8e:2a:56:31:de:2c:a9:3a:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=52542bb0-9813-4cf7-bcad-256738267130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:10:bb:27:53:00:9a:de:82:1d:09:e3:a8:
                    06:e6:b6:b4:6f:7d:cf:ee:2e:5e:2b:45:bc:1b:28:
                    f6:7e:79:1e:39:31:71:38:d0:c4:53:d1:82:99:48:
                    a7:17:f7:5e:d7:aa:9f:92:9e:22:55:13:dd:0e:87:
                    01:90:69:f3:84:eb:9c:ea:73:e1:b4:80:40:fa:7e:
                    b4:45:99:35:9d:2e:26:1a:5d:d4:d4:c1:c1:87:89:
                    50:a4:4e:7b:1d:98:05:a1:e0:b1:fb:dd:70:1f:4e:
                    73:58:cc:25:dd:b4:e9:1a:e2:48:60:38:74:ca:be:
                    9b:95:c5:04:74:e5:b4:d8:b5:82:6e:39:cd:27:54:
                    6e:42:09:2f:af:b3:79:66:75:60:52:83:d6:45:b1:
                    7b:b6:8c:af:00:73:b9:08:da:01:8e:d9:a3:77:5a:
                    47:f3:e0:93:e4:11:41:b0:2a:35:90:8b:83:fd:18:
                    12:85:5e:91:31:35:18:cb:41:bc:f1:80:24:3f:6b:
                    14:5c:e2:b1:3f:76:0d:af:3b:84:9c:de:97:a1:ff:
                    29:52:38:c5:51:9d:5d:38:b1:8a:11:b2:f2:dd:ec:
                    ce:fc:19:6a:5d:e9:e4:1a:c9:8b:53:ea:42:e2:57:
                    a6:8e:64:83:00:77:9b:e8:d3:04:6f:a7:e3:1f:9c:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:3F:8A:8E:F5:1D:AB:CF:F3:6A:65:46:C5:EE:01:C0:F5:10:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl

            X509v3 Authority Key Identifier:
                keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:58:9f:ec:d8:ce:45:19:a8:28:af:e7:35:76:92:49:77:e4:
         e6:f3:e3:6c:36:54:80:50:50:d7:bf:66:16:04:2c:2e:a6:24:
         82:b8:79:0d:dc:39:c5:54:bc:6f:5b:b3:28:a3:b7:a2:f4:44:
         38:62:ed:f2:00:b1:0b:62:a9:29:84:2b:ff:86:ee:33:02:5d:
         c4:fe:03:4f:d7:6f:59:ed:b0:b7:1d:42:21:bb:05:83:ba:80:
         a5:83:2a:05:d5:a7:b1:34:3a:e2:3b:30:f6:7f:57:c8:cb:70:
         22:83:c5:50:65:65:af:6a:e5:63:f9:d0:df:0c:f6:cd:45:33:
         ed:3b:b2:15:b2:89:02:0c:af:30:ab:cc:7c:e6:d9:5c:eb:72:
         53:8f:ab:cd:ea:9f:c2:ec:b4:b1:0b:87:0a:05:2e:3b:80:17:
         cc:b4:3a:9b:d3:c7:46:3b:5f:e4:ea:8e:e1:b1:b3:c1:6b:cc:
         8b:03:a1:8d:97:dd:0a:a7:c4:d5:a3:55:05:8c:de:07:e5:6a:
         53:26:82:a2:55:59:ee:77:b8:90:4c:7c:cc:bf:e3:e8:b3:29:
         c3:a4:11:de:a1:2e:d8:6e:aa:40:b8:22:c7:7e:65:9a:8e:d4:
         dd:7c:2b:5f:72:9b:bd:d4:e3:46:1d:e5:a9:ae:3d:e0:fb:da:
         77:11:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org