Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa
File:                     e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (raw, json)
Hash identifier:          ipDU+ltZLK/Fu7sYczyhWewgz3BVfmVEeghjfQaiWmc=
Subject key identifier:   C3:53:B6:3D:AD:19:A9:34:C7:91:23:81:E6:E7:1F:D0:48:D8:D1:26
Certificate issuer:       /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7
Certificate serial:       010D0C9F43285847B53151B8C2A32CFEE3B92800
Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     14426
IP address blocks:        192.75.140.0/24 maxlen: 24
                          192.139.26.0/24 maxlen: 24
                          192.139.29.0/24 maxlen: 24
                          198.161.32.0/19 maxlen: 19
                          204.209.21.0/24 maxlen: 24
                          204.209.22.0/24 maxlen: 24
                          204.209.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:51:b8:c2:a3:2c:fe:e3:b9:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=87de1d4e-1ef4-450c-8d13-a05b24c4b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:ca:7e:f8:5d:d7:34:92:35:8d:8e:d0:97:
                    72:60:1c:7b:1e:c3:d6:4b:f3:a7:a4:f7:e7:7e:6c:
                    9a:92:b2:c7:f1:2e:48:22:69:16:9e:48:34:47:71:
                    69:3b:a0:57:f6:f9:6f:6e:0d:d5:9c:8f:e3:f4:b6:
                    f4:58:45:8a:e6:a8:53:06:c8:05:0d:0c:1f:2d:e8:
                    bf:0c:55:3f:fe:4c:0f:3c:d6:37:e3:d1:3e:6f:2e:
                    1f:10:a9:6f:3f:57:7b:7b:ff:ee:5a:89:a2:73:d0:
                    ac:c7:4a:47:b9:3b:32:cf:78:35:97:c8:a6:56:91:
                    d8:86:17:d0:a3:a5:10:f2:91:13:58:c6:fb:14:66:
                    6d:13:46:0d:62:9a:03:bd:35:69:93:72:2c:b9:83:
                    50:f7:26:cb:65:82:ea:b4:79:67:8f:01:f0:9e:52:
                    eb:00:7b:d5:57:14:8c:22:96:bb:df:7c:f8:50:10:
                    9a:e1:2f:1c:ce:f7:da:f2:c6:53:72:fd:f2:dc:f7:
                    28:9f:ef:ea:61:c0:bb:f0:75:05:0b:bd:2f:87:ab:
                    a6:69:ab:64:67:96:9c:bf:aa:e6:07:40:f2:d7:b4:
                    6b:cd:04:e8:54:0c:32:2c:4f:90:92:82:a6:70:cb:
                    2d:54:5e:f3:de:67:b3:cf:04:d9:15:83:f7:25:c2:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:B6:3D:AD:19:A9:34:C7:91:23:81:E6:E7:1F:D0:48:D8:D1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl

            X509v3 Authority Key Identifier:
                keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.140.0/24
                  192.139.26.0/24
                  192.139.29.0/24
                  198.161.32.0/19
                  204.209.21.0-204.209.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:a6:51:8a:85:d1:1c:34:05:38:72:85:8e:46:30:91:1c:
         7f:2a:be:e6:e6:10:cc:94:bb:8f:4e:56:88:30:8d:34:ab:2f:
         b5:22:ad:4b:d8:34:3f:90:50:e5:95:6e:0a:fa:2a:fa:bc:1a:
         1d:7a:6b:40:4e:61:ea:a1:68:84:c6:bd:ef:ac:e1:d1:60:54:
         06:74:8f:e8:96:18:4b:88:7f:39:f1:3a:de:ed:e4:ed:02:da:
         49:61:ae:eb:6c:54:1f:5b:69:bd:cc:4a:c1:d1:81:6e:d5:1a:
         04:cc:3e:b0:c0:71:c7:f2:98:f3:78:91:6c:d0:35:fd:a3:ca:
         6f:ac:92:7e:3a:89:a3:53:7f:52:e3:79:83:6a:a6:ba:86:df:
         d9:47:55:6f:2d:af:82:8b:bb:06:e0:30:0c:bf:03:96:d7:b5:
         b8:34:7c:5d:2c:c3:7c:15:9f:c6:de:a8:19:a8:69:d5:75:0c:
         65:aa:16:b8:a3:de:46:2e:f6:92:5c:c5:b3:5b:61:b6:b2:cc:
         a4:2f:33:a4:18:de:8d:cf:bd:6e:50:e8:92:b5:e9:dd:10:ae:
         53:4c:94:94:50:2f:57:33:73:58:13:52:1a:13:a1:40:4b:47:
         97:c6:0d:8b:74:25:5e:1d:f1:54:54:0f:cc:d2:d8:68:2c:4e:
         cf:06:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org