Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
File:                     63906606-7983-3c12-8d4a-5461f3222ca9.roa (raw, json)
Hash identifier:          XPGfv23kSivD8jEEKcW2H9vMi26fmrH9XFQ642kyLgE=
Subject key identifier:   FC:2B:0B:92:58:26:5A:68:76:87:AA:28:50:E5:65:88:98:6A:39:BD
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F432858472835F86962779501D9999D00
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     55178
IP address blocks:        192.230.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f8:69:62:77:95:01:d9:99:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=e2630e93-57c7-48d6-a6d2-711080a6bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:ff:eb:a3:82:99:25:99:de:8d:b0:5c:f7:
                    a8:ca:b8:70:d9:f7:8b:b3:74:03:31:73:05:89:45:
                    84:71:e6:d2:eb:ac:34:fa:e8:b2:29:0b:40:5a:1a:
                    e1:03:1a:cf:03:13:b7:b0:a1:cd:fa:80:12:95:cb:
                    99:33:38:8b:e4:5a:82:a9:80:0a:c7:dd:82:e5:6e:
                    36:59:fa:af:31:37:7b:88:ed:8c:05:41:f1:ed:4c:
                    36:76:d7:21:eb:ad:14:c8:00:58:5d:2e:91:16:bd:
                    64:43:31:4f:12:a8:43:33:8e:29:86:f6:f0:71:45:
                    e1:50:04:dd:28:2c:9b:b4:cf:db:e4:d8:e3:71:14:
                    43:23:64:a5:07:65:20:f2:fa:d0:e9:f8:e0:15:32:
                    b5:00:51:92:c8:52:39:36:8d:b0:50:cb:2f:95:03:
                    f5:49:a9:b6:09:bc:93:b5:d0:ec:e3:87:c6:e7:3f:
                    2f:d5:95:69:59:79:2a:8c:c6:60:b8:df:ff:f5:67:
                    97:06:7d:75:b0:ad:de:2b:c6:87:0a:12:a8:58:05:
                    ea:e8:77:66:6c:28:f8:ff:a2:9f:39:61:4c:30:60:
                    d9:a5:ea:23:a7:09:70:b7:12:b2:8b:30:77:b7:1c:
                    17:54:30:6e:ad:4b:da:b8:21:49:22:83:03:38:48:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:0B:92:58:26:5A:68:76:87:AA:28:50:E5:65:88:98:6A:39:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:0f:a7:c5:e6:b8:48:32:82:31:55:91:12:9f:90:40:c8:
         aa:d7:d5:da:1e:8e:d1:c1:59:e0:2b:6e:fd:75:e0:c3:18:f9:
         8d:bd:f5:5f:4f:8e:9c:03:54:8f:fd:b4:60:05:d5:b2:ee:82:
         ff:08:4a:d8:63:28:27:b6:01:39:11:78:6c:8e:e3:e8:52:0e:
         c0:aa:bf:e2:40:60:97:b8:db:80:92:95:8d:c9:a6:f4:71:63:
         63:58:0e:b1:9b:e1:05:10:0b:cb:86:3a:4d:ab:8f:2c:60:b1:
         62:56:1c:8d:ac:f6:62:01:da:c3:f5:09:33:c4:28:27:a7:dc:
         69:4e:72:05:8a:56:75:a7:16:ee:94:36:61:86:d9:b3:6b:9b:
         51:63:71:1f:c2:8f:ea:97:c5:2a:7f:2e:aa:82:6a:92:7a:8b:
         18:ae:0b:84:c1:18:8f:32:22:aa:08:89:7f:3d:a1:42:eb:73:
         9e:fb:a7:a5:16:d1:90:3e:7f:ea:ee:6e:19:ce:67:4a:b9:f3:
         eb:cd:67:0a:d5:b7:1e:68:e9:1b:9f:9f:e3:e8:f6:5e:6b:fc:
         ef:06:21:3d:8f:88:ac:08:19:a2:bb:e7:3b:68:c4:d9:e0:35:
         b2:46:cf:58:37:d0:c7:d6:bf:1e:88:b6:b0:2c:49:a4:f2:03:
         83:cf:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:18 2024 by rpki-client on console-ams.rpki-client.org