Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa
File:                     0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa (raw, json)
Hash identifier:          SOSBtTFHnZGgWabjIVIT1OC6IvUr4y9RiZiuhKRz0H8=
Subject key identifier:   D7:43:82:AD:FF:0C:12:9E:FB:34:5D:2B:2C:03:6F:28:F9:F5:C6:14
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76BF3394FFF3375C9B7300
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     4476
IP address blocks:        142.231.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bf:33:94:ff:f3:37:5c:9b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=4cea8c2b-c288-4a2c-8d5b-228624b0d6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:1a:1e:7c:74:6b:04:a6:6f:26:4d:18:ae:
                    e5:b3:10:c6:69:ea:6f:af:eb:a3:0c:35:a1:ab:2b:
                    93:73:62:1a:f1:7a:db:c1:b9:45:76:a4:3d:42:90:
                    49:e6:43:6c:4c:a1:3d:6d:b2:10:89:ec:25:5e:6c:
                    9d:8c:2f:43:4b:d4:bf:e1:b1:74:f0:51:b0:69:3b:
                    61:60:f6:64:b6:e0:9b:e5:ca:52:8a:ec:94:8e:97:
                    25:87:cc:2d:8c:7c:83:f6:46:68:9c:ef:8e:18:77:
                    a1:ec:41:84:49:50:0e:98:28:e6:4a:a5:dc:c6:89:
                    f1:1d:34:ec:51:f4:b8:7d:a9:5a:df:4c:ec:39:17:
                    e1:33:3b:6e:1c:9c:b0:54:f9:9c:83:ef:b4:98:87:
                    41:90:f5:3e:15:d6:c0:45:38:73:2c:be:4a:90:88:
                    5d:e4:22:64:ef:2b:d2:7a:84:a8:7c:14:0b:b9:c6:
                    92:eb:0f:83:86:19:ea:49:a1:37:23:58:1e:3b:42:
                    31:fb:2e:82:12:85:6e:60:d7:ba:a0:47:d1:c3:66:
                    9c:e7:89:2e:2b:f4:1f:a8:11:0e:62:ae:7f:e6:cc:
                    5e:c6:b1:39:7e:70:61:9a:e3:c1:c6:d6:ca:55:7c:
                    28:e6:1b:88:42:f3:21:2e:55:52:ca:2f:09:60:47:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:43:82:AD:FF:0C:12:9E:FB:34:5D:2B:2C:03:6F:28:F9:F5:C6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:b8:ea:bd:07:a8:36:73:20:db:c9:38:e0:d4:60:c9:d2:
         a0:ae:75:19:2a:fe:f5:4d:cd:7c:c7:e0:78:a5:6b:48:e8:f9:
         65:86:f9:f3:d1:8c:3e:28:58:70:a9:2a:b3:26:3a:43:6b:86:
         e5:56:38:ab:8c:16:a2:c6:44:e7:bf:22:c5:d9:5d:57:c4:17:
         a7:b4:b2:a9:35:b4:21:8f:22:d6:c9:1f:24:05:20:a4:3e:60:
         c3:c9:e1:5d:e3:ec:69:5e:a7:87:bc:60:54:9e:19:06:6b:ae:
         e1:d5:91:6a:46:7e:89:c3:62:aa:42:5e:2f:83:ad:3c:f0:d3:
         ae:78:76:2e:5d:0c:ac:ed:50:df:88:53:31:c5:b8:c9:60:61:
         99:d4:d5:c2:a1:79:af:1c:bd:77:f4:c6:49:1b:81:42:88:38:
         a7:8a:7a:07:af:2e:77:2c:17:70:40:85:1a:1b:25:1e:f3:a1:
         2c:a6:12:e5:fb:f6:b2:f0:6c:95:24:a8:0a:44:33:e8:a9:bb:
         f1:f2:52:89:47:ef:60:72:be:49:61:6d:0a:7f:44:92:9a:02:
         f8:16:5f:be:11:31:e1:87:35:87:7b:2a:75:22:f3:8b:e5:7d:
         be:ce:c7:93:5e:01:e9:fa:8c:a9:91:1d:44:7f:b5:dc:c2:02:
         9f:c5:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org