Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa
File:                     22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa (raw, json)
Hash identifier:          TzEkFvObMYgXBrIeziRn/XDSRemULjgCAUU8udHJ5sw=
Subject key identifier:   20:D4:CD:7C:4F:10:71:21:EE:93:56:32:21:49:50:D8:6B:BA:10:F6
Certificate issuer:       /CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee
Certificate serial:       010D0C9F4328584765A0F57969E0A1039CE3CA00
Authority key identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     54669
IP address blocks:        192.92.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f5:79:69:e0:a1:03:9c:e3:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=f12d2ba0-2f57-48ca-b949-b89fd871ce0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:c5:dd:c7:61:1d:bb:6e:2f:20:7b:03:2a:
                    b4:7a:00:d7:df:88:14:f3:be:ad:ce:3c:bb:0f:68:
                    ee:7a:49:30:bb:2c:b9:ff:6e:30:75:47:8e:07:f8:
                    a5:ca:42:f9:5a:ea:94:87:5b:5a:55:cc:35:a0:d2:
                    33:cc:8a:53:dc:3b:6a:b3:d9:34:77:08:aa:0a:c4:
                    d0:00:06:58:68:74:08:ed:4c:2f:8d:67:d3:3a:cb:
                    73:ea:13:73:40:78:05:83:fd:78:de:eb:2d:fb:b7:
                    37:39:61:fd:e1:17:aa:05:dc:05:0e:d0:0f:53:8d:
                    cf:45:a4:cc:21:52:30:17:7a:65:8f:bf:4d:92:c9:
                    5e:38:e1:67:5a:f3:99:b9:c6:60:7d:14:a7:5a:50:
                    bd:32:a9:f8:61:93:10:fc:2a:5d:c4:ca:ee:17:da:
                    01:42:8c:28:a4:d8:aa:94:31:a1:19:0e:fb:14:69:
                    81:00:73:ec:fa:6c:8c:9b:4e:3f:5c:b3:88:26:79:
                    5f:4d:b8:56:07:6b:96:db:64:34:75:d6:b9:6b:9d:
                    c0:79:32:15:52:55:05:8f:2a:39:ab:cc:07:cc:20:
                    a3:f1:fb:9c:fc:bd:c4:ff:f6:c8:82:d1:97:25:2f:
                    cd:63:e5:00:1f:c9:53:7b:0b:21:94:ca:cf:73:24:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:CD:7C:4F:10:71:21:EE:93:56:32:21:49:50:D8:6B:BA:10:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.crl

            X509v3 Authority Key Identifier:
                keyid:15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:eb:5b:da:22:77:95:69:ae:1a:33:58:ed:a1:35:af:4e:
         4d:aa:06:80:f1:29:15:6e:80:22:55:31:cd:34:bc:66:27:ce:
         8d:1b:16:8a:c0:9b:bb:e6:fb:2b:d3:d1:46:93:17:d7:2a:36:
         e1:56:dd:c5:3c:d1:91:c2:21:12:9e:3d:06:f7:2d:58:a9:0e:
         89:d2:c8:e0:b7:96:d8:a5:e4:c6:3b:26:f0:c1:0f:90:f6:e8:
         d9:ff:08:21:04:57:0c:aa:a7:8a:49:bf:21:43:84:5b:2e:52:
         4f:2f:ef:b5:20:88:2f:38:6e:6d:ff:22:29:20:bb:a2:e8:d4:
         d8:af:46:97:c0:36:d0:17:a1:3b:11:67:bf:5d:b9:eb:7b:6c:
         e5:25:d3:75:af:85:67:42:21:da:47:c1:51:c6:6a:3c:f8:38:
         c4:2d:79:24:e2:6a:ba:fc:b6:2e:c7:4f:8f:9e:3f:4e:76:5f:
         38:f6:86:48:d4:13:b8:e8:ba:68:5a:6a:a6:e2:a3:de:0d:a3:
         13:a7:be:44:56:6f:3b:9b:ee:60:02:e3:4e:ba:90:ce:09:e5:
         61:55:46:9f:6c:54:d2:76:51:9b:8b:97:c1:e0:d8:6b:64:04:
         71:7e:6d:e1:3b:f8:4b:96:cc:f7:dd:6d:5c:6e:07:ec:4e:48:
         04:5d:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org