Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa
File:                     cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json)
Hash identifier:          B0urU6fnlxZNlRkbvR3wC0gjgQy2OQ+4+w1ORvthfEk=
Subject key identifier:   84:03:64:ED:B9:91:08:72:0B:97:E2:95:D6:23:D8:35:3E:32:DB:C5
Certificate issuer:       /CN=994eeb97-12ef-4721-824f-9ba41ba67983
Certificate serial:       010D0C9F43285847CF2A65CF6B6C40C15F911A80
Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa
Signing time:             Fri 08 Nov 2024 08:17:42 +0000
ROA not before:           Fri 08 Nov 2024 08:17:42 +0000
ROA not after:            Thu 06 Feb 2025 08:17:42 +0000
asID:                     23539
IP address blocks:        147.185.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:2a:65:cf:6b:6c:40:c1:5f:91:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Validity
            Not Before: Nov  8 08:17:42 2024 GMT
            Not After : Feb  6 08:17:42 2025 GMT
        Subject: CN=874b63ef-2a33-4804-822d-83db47dfb6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:a0:3e:31:cd:f8:5f:ea:da:4a:61:6d:9e:
                    0b:ab:54:39:98:ab:89:d1:ae:cf:ac:a3:e3:30:9c:
                    c8:a0:78:a5:a5:49:19:ae:5e:71:52:68:1d:c3:cd:
                    58:9b:a0:c9:43:0c:68:28:96:81:27:b0:74:70:1c:
                    f6:cc:3c:c7:93:8b:17:89:0b:ea:a7:9b:fa:f3:f8:
                    df:74:67:8c:7a:b1:45:a1:c1:0f:2e:eb:40:47:f3:
                    f0:78:05:ea:25:71:71:af:c1:8c:d6:e3:5a:eb:8a:
                    c4:de:8b:f6:6e:29:90:0f:e7:2b:f3:25:2f:92:73:
                    61:96:45:9c:98:d1:4f:b7:fd:64:12:76:4d:a7:b3:
                    29:26:3d:76:90:ff:7c:2b:68:86:10:83:41:db:09:
                    7f:de:28:dd:f2:73:74:45:b1:a9:17:ed:ca:75:8b:
                    0e:c9:2c:c4:22:c8:29:96:4f:19:9c:a4:6f:5b:ab:
                    06:69:7d:44:62:8f:bf:ed:69:4c:b5:ec:5c:4d:55:
                    f1:86:9e:84:03:3b:a1:6b:3f:1e:f4:0f:a3:b1:ec:
                    ee:6a:e2:13:62:ac:58:7d:e7:e4:b3:7d:bd:7d:38:
                    7f:ef:a4:ba:1e:b6:70:d8:b8:1c:c0:0d:d2:1a:1e:
                    e0:cd:49:60:98:27:29:e8:03:fc:15:4a:80:a9:c8:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:64:ED:B9:91:08:72:0B:97:E2:95:D6:23:D8:35:3E:32:DB:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl

            X509v3 Authority Key Identifier:
                keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:67:a9:1e:5f:56:e2:f4:a4:da:05:af:16:80:ae:a9:5b:0f:
         03:ce:5b:48:8e:e2:0c:d1:c8:73:9f:d1:7f:29:4f:e9:b7:be:
         a0:5d:a2:64:bc:30:9e:99:32:f3:af:1a:1d:81:bc:b4:e6:37:
         4f:ac:51:fe:dd:5f:05:5a:06:c0:53:01:f6:5d:b6:be:36:e8:
         8f:2c:92:5a:87:94:c6:48:17:e4:6e:4a:3e:d0:4c:42:f0:b3:
         bb:98:c8:3b:ba:21:7e:69:98:e3:e0:9c:f3:8d:d1:3d:4f:bf:
         ff:39:f1:36:b3:ee:6b:5d:cf:69:1b:d2:9b:69:62:f2:8a:3b:
         d3:2c:22:ed:b6:22:7a:c0:f5:b4:6d:66:ac:a2:0b:9b:a2:83:
         27:b0:ac:f7:8d:44:56:e0:e8:fb:d9:6e:18:a1:77:30:3f:17:
         23:d3:d0:dc:ca:72:66:1d:15:29:4d:d4:5c:d0:c1:ac:41:26:
         8e:36:62:13:09:3b:30:03:07:fb:93:42:b4:88:c0:e6:2e:ea:
         ae:10:80:23:97:26:0b:cb:f3:d5:3c:9c:0d:b4:1b:e0:14:e2:
         58:73:9c:a9:9c:ea:eb:c7:10:f5:3e:02:09:5a:e8:ac:79:99:
         7f:9f:33:19:90:0f:25:1e:5a:b8:09:e9:82:3b:b5:36:91:e7:
         dc:54:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org