Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa
File:                     953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa (raw, json)
Hash identifier:          rAkQmtKr87El+dm+DfQMxkuv+R8u47iDER8ojZadm5g=
Subject key identifier:   63:10:C2:AB:A0:C0:7A:67:7A:13:96:CA:3B:13:E4:CD:1A:7C:FD:94
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F4328584789EBFE65CCBE74213E88F1C0
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     398564
IP address blocks:        204.235.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fe:65:cc:be:74:21:3e:88:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=234a960c-a7ea-45c0-8bf1-3b21d114a5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:ca:03:89:c4:40:b1:83:2a:69:bc:fe:9e:
                    96:c5:8c:0c:e1:19:63:ea:61:d6:25:e3:75:18:0c:
                    9a:6a:c5:31:4a:64:10:a7:ff:7c:f9:67:82:cb:e8:
                    9f:82:57:f3:05:59:c2:14:0f:79:bf:dc:7a:ff:81:
                    ce:81:df:0b:5e:c8:9e:a0:a7:ac:37:eb:f0:b1:2d:
                    d1:7d:14:5e:3e:eb:9b:7e:6a:ac:bb:4d:31:ce:0a:
                    17:7f:fe:aa:03:63:96:c4:65:48:0f:3c:6e:35:d1:
                    95:ac:84:70:b4:5e:ea:27:af:95:ce:62:e3:1e:3e:
                    aa:4b:16:f4:97:b4:32:8a:23:43:8f:d3:dc:13:c4:
                    d4:a2:db:a7:c7:a3:01:31:46:d8:25:e4:76:be:2b:
                    f6:1b:d3:e1:37:a3:6a:45:17:cc:69:72:8d:40:af:
                    95:d4:08:55:16:1f:59:ab:e7:58:48:50:22:a2:7c:
                    c8:47:67:81:81:04:cf:5c:99:96:0a:a3:9b:6a:85:
                    69:e0:01:9c:67:49:e8:19:a5:12:33:b2:11:24:1e:
                    83:bd:21:82:8f:56:d5:09:b9:28:9f:bc:ad:68:e7:
                    8a:df:13:44:e0:88:5b:fd:af:2f:66:83:13:b4:7f:
                    ac:3f:80:61:1e:57:b9:1f:f1:82:5c:96:89:54:db:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:C2:AB:A0:C0:7A:67:7A:13:96:CA:3B:13:E4:CD:1A:7C:FD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:00:82:13:83:34:69:6d:ef:97:e3:87:d4:f8:7b:7d:bb:8a:
         44:78:b8:10:96:6d:e3:e4:0d:45:28:b9:1f:7d:2a:ff:3b:6b:
         c9:f2:16:7d:02:65:87:c7:5e:9a:b0:70:7b:71:18:72:6e:55:
         eb:ac:36:9d:72:8f:e2:c5:47:a6:a3:80:d9:70:a2:af:cf:74:
         82:61:54:66:1e:66:f9:93:f2:c2:8a:5c:31:a4:da:82:61:a9:
         69:a1:7f:ab:5b:2b:70:4e:48:92:65:9f:55:20:e9:6c:1b:8a:
         2b:92:c0:e4:de:3f:e0:f9:19:dd:ff:e1:40:26:3e:2d:0e:81:
         7a:aa:9c:2a:67:ac:98:8c:a4:90:aa:1f:14:1d:5e:05:98:74:
         d7:27:06:09:4e:8c:e4:0c:4f:ce:ea:fc:42:33:ca:08:68:93:
         ca:d3:1b:12:d5:34:93:e8:85:f9:30:49:b8:97:ba:d7:8d:a0:
         c7:64:b2:dd:f6:ec:b0:aa:d0:98:63:e8:04:36:ca:d9:3c:eb:
         58:09:7b:e1:7f:86:55:a6:56:00:b5:58:2e:19:4a:18:ac:4b:
         99:6b:f1:17:24:fc:53:94:eb:38:bd:17:13:aa:a7:26:07:01:
         92:de:fd:d3:c3:1e:36:4d:e0:c5:88:9d:63:19:f2:ea:0d:3e:
         02:ea:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org