Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
File:                     b08af031-d473-3555-848a-e8df72a59930.roa (raw, json)
Hash identifier:          xCbrCX/C9XhIXLWkOHYlJonO9WxBSQeCovYQUq1pfz4=
Subject key identifier:   7E:E8:54:AC:96:62:3A:3F:F2:7D:BC:FF:EE:07:B5:B9:EB:AE:E7:C5
Certificate issuer:       /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial:       010D0C9F4328584789EBFEBAE955FAB89DDE2F40
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     398564
IP address blocks:        192.190.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fe:ba:e9:55:fa:b8:9d:de:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=c78a721f-ae86-426a-8c0f-7be491cdbe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:0c:f0:50:a2:a6:78:18:e6:54:eb:52:8d:
                    1f:c1:d4:fa:4d:0e:1e:49:51:5c:f7:7e:1c:c0:c6:
                    b1:5c:3d:52:2d:65:5f:26:0c:37:e7:5d:61:77:21:
                    bc:80:ee:00:73:6e:68:77:b5:1c:ef:38:21:8f:b0:
                    fb:dc:ea:21:c3:bc:17:83:5f:38:99:a3:8f:83:69:
                    ac:18:b9:37:e5:b7:d3:b0:d3:7c:e0:45:32:42:9d:
                    cb:d7:46:f5:e9:73:1e:07:ab:ca:ad:dc:9f:f1:69:
                    8d:22:e0:20:da:21:35:47:27:af:cd:fd:bf:70:5d:
                    ad:07:07:db:b3:41:95:1d:c5:92:43:ec:a7:c9:51:
                    b6:bb:ec:f3:4a:35:23:64:65:d3:87:26:3a:ae:b2:
                    b5:60:22:8d:4b:67:7a:1c:01:43:d4:62:04:aa:aa:
                    2f:15:93:f3:9e:9d:fe:25:b1:4e:5c:6f:53:e1:cf:
                    68:66:69:00:e3:68:1e:5e:d3:e4:de:45:02:94:7b:
                    68:ba:7c:7c:28:6d:31:eb:2c:96:15:2f:2c:87:31:
                    9d:c0:ba:d3:d6:fd:7f:70:d4:2d:fd:de:54:aa:ee:
                    ba:ee:28:04:53:40:77:cd:71:85:01:8b:a0:fc:9e:
                    81:d2:d2:f4:fc:ca:9a:69:87:b8:f8:8f:d0:bd:6c:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E8:54:AC:96:62:3A:3F:F2:7D:BC:FF:EE:07:B5:B9:EB:AE:E7:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b9:5e:b9:c2:81:1f:02:9e:1e:57:2b:3c:38:12:f7:94:e5:
         d2:63:2f:9c:91:76:ca:50:f2:f8:f0:08:df:b2:06:37:c5:e7:
         fb:03:9f:0e:b5:68:a3:fa:42:95:ec:bf:32:b9:41:de:c4:d5:
         67:2c:54:ea:a0:f2:27:b8:13:5a:3e:5c:97:2f:73:2f:8a:a5:
         1c:cc:24:c1:d3:1c:92:39:97:e7:1d:9b:ef:4d:e1:62:b3:82:
         49:32:36:32:ac:92:ce:af:1b:eb:b9:7a:45:35:82:f0:c0:b9:
         54:4e:f1:86:56:fd:c5:03:2a:e1:d4:57:75:3b:bf:4d:6e:b4:
         9d:fc:bc:48:4f:90:8e:a7:06:39:27:87:e0:3a:0a:8c:1c:a4:
         a4:da:c1:ee:2c:5a:88:37:56:45:f9:13:2c:c2:57:4e:8a:b6:
         25:05:98:b0:8e:70:5d:fa:3d:f3:8e:9b:d1:08:ab:22:9e:9e:
         c0:e7:fe:a0:a3:57:68:a3:3f:1b:0d:e5:4d:f1:40:c8:cc:cf:
         d7:c7:da:02:de:2c:66:3e:24:a5:4c:a8:0d:c4:d0:c8:d4:9d:
         ba:6e:16:40:8b:b5:f2:7d:c5:ee:07:ab:8d:5d:a9:89:7a:0a:
         aa:01:8b:db:f8:85:84:e7:37:b4:2e:51:b9:71:3b:a2:17:bb:
         a4:3b:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org