Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
File:                     a789ba80-8aff-3b9c-92e1-e386d72187ea.roa (raw, json)
Hash identifier:          1FP5lG6DYt7HCF2gKjRmQUbLr3LozSP+X1KHFS2fniE=
Subject key identifier:   4F:1E:74:7B:75:3C:05:8A:D7:02:7D:28:DD:B4:31:C1:7C:73:84:26
Certificate issuer:       /CN=0ace9928-8310-4c75-a54b-a4085ec0045a
Certificate serial:       010D0C9F432858472F30843CAA4DA232F4B5D3C0
Authority key identifier: EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     16668
IP address blocks:        199.181.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:84:3c:aa:4d:a2:32:f4:b5:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ace9928-8310-4c75-a54b-a4085ec0045a
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=8e470c81-25d1-48fb-a968-e20f6faadea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:13:29:3b:7d:48:fe:4d:6c:13:cb:d0:bf:
                    50:90:22:b8:a7:39:c9:8a:4c:32:4a:6f:70:7d:45:
                    fe:88:51:18:0d:c9:dd:8f:6e:26:f3:f6:e6:09:94:
                    01:9d:f0:af:f2:3a:28:fb:d8:51:91:43:53:63:8f:
                    42:7c:26:ac:96:cf:07:9b:9d:f5:f3:ce:88:8f:31:
                    34:0a:ae:b0:e7:06:db:ee:40:7f:cc:1f:72:6d:27:
                    81:16:31:f5:5d:e1:aa:80:43:6f:e9:fb:60:6b:74:
                    e2:29:b8:b5:6f:83:8d:b4:d8:d9:19:8e:e5:79:37:
                    02:58:8d:df:35:49:84:1f:07:7a:0c:6d:3e:2b:3f:
                    c3:ca:df:38:ef:73:82:33:4d:a9:c7:a4:3a:90:a6:
                    b5:ec:9c:97:3f:1a:d6:cd:c8:b8:98:a6:a5:62:b8:
                    69:ad:7c:7a:cd:60:b6:21:8c:16:9c:2f:48:c8:0c:
                    26:bd:67:8d:7e:44:4f:52:b4:05:2d:b9:9c:1d:2b:
                    9d:fd:04:7d:c6:3f:fe:3e:e2:90:58:53:5c:f6:ff:
                    5d:8d:d2:ec:86:55:ee:30:91:bd:23:57:9b:b6:fd:
                    a3:97:72:ab:88:71:aa:62:6c:91:71:1e:c6:58:e2:
                    96:13:ac:21:90:e1:39:c1:ca:61:f6:c2:66:d5:ad:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:74:7B:75:3C:05:8A:D7:02:7D:28:DD:B4:31:C1:7C:73:84:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:de:1e:c3:b6:d5:85:09:95:08:e1:dd:b0:3e:b7:ee:f0:e4:
         9a:e8:65:6f:b6:b6:bf:25:02:60:73:05:a2:0a:80:5b:52:f8:
         d9:f0:c9:ed:6c:38:1e:f0:7b:97:9b:cc:b8:e6:8e:36:e2:56:
         df:43:45:ad:42:7a:ac:89:0b:6c:c4:1f:c8:be:bb:91:7b:24:
         93:26:2f:cc:f7:5f:7b:22:2e:cb:46:34:88:af:22:36:28:9a:
         14:bd:4b:4d:e3:0f:c7:56:c0:3b:16:5a:35:52:d7:62:a9:b6:
         c0:46:86:e3:77:dc:75:24:df:e7:5b:d3:43:5d:d4:39:23:c0:
         f7:ba:a5:a1:04:6d:b2:97:bf:64:b9:bc:62:1c:45:bc:20:e0:
         b7:a2:cb:0c:e2:d6:3b:45:a8:fc:ae:95:5c:64:d8:6e:02:b3:
         99:a2:90:5a:b2:6e:2a:fc:e2:fa:04:7b:09:83:f2:fa:7c:47:
         31:14:24:51:86:cc:73:39:2a:91:bb:ea:06:21:2f:09:cc:b1:
         4a:05:89:39:aa:95:82:bd:5d:9d:15:a0:19:41:72:0d:4f:c2:
         58:86:a3:c5:86:60:1a:e1:fb:40:14:bb:0b:a2:dd:cc:d9:e3:
         4b:78:93:6f:7a:71:81:b8:d9:4a:21:e1:af:b6:51:24:0e:06:
         84:32:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:27 2024 by rpki-client on console-ams.rpki-client.org