Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa
File:                     60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa (raw, json)
Hash identifier:          6s1/YhMJ8AYYZXS1smpUDbjYAmrm1b5ToAyDyzVNuJw=
Subject key identifier:   DF:4A:7A:FF:D5:64:1F:D2:9A:8B:0E:A3:4D:AB:F3:87:AB:AA:49:2F
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F43285847B10164AADD863C0FCB91B680
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397453
IP address blocks:        141.193.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:64:aa:dd:86:3c:0f:cb:91:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=ee33623e-9a15-4691-9c4c-9fda4bb7b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:25:74:56:f5:20:30:67:7a:2e:22:ed:c0:
                    27:0f:9a:16:6e:ab:19:4e:2f:93:46:75:9d:55:4b:
                    9c:99:0d:4c:15:cd:21:f0:91:5a:2f:27:96:cd:2e:
                    3b:c9:8d:6c:82:24:b7:a2:d9:fd:16:dd:90:f5:b6:
                    6f:fa:a5:fa:d1:fa:3a:1d:32:2b:b7:50:9c:06:90:
                    18:41:32:93:cf:20:89:f3:c4:e7:9b:4d:08:c6:22:
                    5a:58:7e:97:96:78:d9:e4:8d:f5:bc:cc:33:70:15:
                    56:e6:f9:9c:2c:ad:d0:bd:4f:0d:87:59:74:4b:07:
                    ee:fc:76:c0:c5:35:96:b0:1e:4e:d2:25:b8:f3:7e:
                    61:ab:5e:10:3e:00:08:c9:d1:8a:4a:72:2d:5b:1b:
                    01:bf:22:3b:a7:b8:9b:92:ef:1d:56:26:0b:11:e4:
                    96:7d:c7:ec:f9:7a:0a:ba:5c:f0:41:00:8b:40:75:
                    51:5c:d5:0c:87:c2:d6:8d:69:24:0f:12:4f:e4:6f:
                    97:3a:14:ac:b3:e2:7f:5d:02:66:81:1f:ca:b8:55:
                    0b:ee:3e:cc:3d:ff:af:71:d1:e3:de:89:bb:4f:8c:
                    f5:2d:7d:e6:4c:87:9a:f0:ab:38:38:a3:c1:8c:4a:
                    f5:89:a6:b4:cc:cf:a0:69:1a:8a:33:03:52:f4:28:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4A:7A:FF:D5:64:1F:D2:9A:8B:0E:A3:4D:AB:F3:87:AB:AA:49:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:82:cb:d4:49:9a:e6:57:0b:ea:de:24:48:13:b6:4b:c0:c2:
         e6:c2:b2:d4:fc:0d:dd:78:a6:06:2a:b3:52:62:02:5e:e5:3e:
         97:96:ef:72:8c:a7:ef:97:15:9d:45:58:54:4a:31:a4:dc:dd:
         89:87:64:ec:41:82:db:fc:ab:de:34:1d:6e:ae:92:63:88:db:
         72:1d:8e:d3:ef:bc:dc:ea:fe:98:c4:7b:c3:f0:46:40:39:3f:
         42:07:f4:be:fc:8a:df:fc:02:a7:9b:51:39:99:f4:4c:d9:3e:
         57:4c:62:78:6f:f8:3c:2f:78:d7:a3:72:bf:1f:0d:34:88:14:
         79:a8:ca:ca:5d:5a:45:e9:b5:ff:b2:13:24:c8:cb:47:d2:4d:
         04:3b:b6:65:69:bd:60:5b:8e:da:1c:66:d1:fc:b2:6e:98:16:
         26:df:b6:c4:a1:29:a4:1d:1b:59:da:bb:5a:fd:79:1f:10:17:
         fc:23:03:3a:7d:64:54:4c:91:98:1d:00:03:38:7b:06:23:b0:
         3e:76:dc:ff:9b:43:f6:b9:01:da:83:2b:e6:70:c1:da:a3:22:
         47:d6:53:62:f2:fe:e6:c0:c5:96:17:b7:08:56:58:eb:7d:8f:
         02:9d:e4:d2:d7:59:eb:39:b3:75:cd:3b:ea:4e:a6:2e:f6:ae:
         a0:cc:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org