Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa
File:                     68a09496-dd1f-37b9-a873-c541d78bb65b.roa (raw, json)
Hash identifier:          warc7peTLjzdVHZTqtj/kqBty70CS70nH6mQE/GLFOs=
Subject key identifier:   BD:33:80:64:07:45:54:5A:60:EC:94:CB:DB:5B:BD:4A:06:77:89:39
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285847D29F5A98EF9B16631804B710
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     3738
IP address blocks:        192.250.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:5a:98:ef:9b:16:63:18:04:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=f0354010-3cf2-4dc4-ae1f-4a595ed2435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:04:24:b0:04:05:cc:c6:12:04:5f:1b:f8:
                    46:31:14:97:fe:7b:50:3d:9d:72:92:a5:c3:a0:89:
                    11:7c:6e:4d:ce:de:b7:3e:47:e0:6d:da:ca:0f:b4:
                    61:45:3d:d5:a9:ab:bb:64:ca:31:ef:c2:08:0a:14:
                    47:d7:87:da:cc:ae:33:1d:00:e3:4f:d7:71:24:b7:
                    98:9b:cc:e5:96:86:9d:30:74:c3:8a:c8:f2:44:f4:
                    e8:2d:f8:95:19:6e:ea:e3:eb:78:96:42:3c:0a:53:
                    ed:ef:ce:81:67:c3:c1:4a:a4:e9:28:23:31:28:db:
                    89:9e:4b:d2:97:9f:08:c0:a9:f6:35:c9:55:93:4f:
                    dc:f2:a9:32:a9:83:5c:1e:48:33:7d:18:88:b4:f1:
                    65:03:66:c5:e0:44:25:1c:d8:71:ab:57:df:ac:62:
                    7d:3a:9b:f3:41:2e:30:35:66:a2:d1:b6:0e:93:3e:
                    1c:1d:ee:9e:a1:74:09:52:a7:5e:2e:71:d4:15:e9:
                    3e:96:87:79:8f:64:17:9a:dd:a1:a7:2b:94:1a:65:
                    b5:a3:12:c1:98:58:e5:6d:3e:0e:4a:52:6c:b6:1f:
                    79:5c:d8:94:c7:3d:df:ed:fb:91:a0:98:a8:7b:75:
                    a4:a0:2b:e3:61:c1:43:b5:c1:61:ea:38:ed:ad:1a:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:80:64:07:45:54:5A:60:EC:94:CB:DB:5B:BD:4A:06:77:89:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:c3:3c:d1:23:12:ad:f0:d8:03:6d:a7:33:78:c5:91:98:
         97:a8:27:58:97:00:b1:86:b2:0a:d4:79:d4:d1:d2:b4:fd:b8:
         29:e9:48:43:d1:ca:be:69:68:1c:23:2e:34:ba:35:b8:4e:6a:
         9c:5c:7a:e7:6e:c0:38:f7:38:b6:3a:80:8b:b1:cb:f0:80:0c:
         5f:14:39:36:5f:f4:b0:1f:a7:5b:7d:e5:fc:48:98:e7:1a:98:
         ce:e1:c0:37:96:37:ec:16:e0:15:34:0a:00:a0:13:ba:fd:17:
         3a:f4:3c:cc:0d:25:1e:e6:74:3b:5f:35:6f:95:fa:55:b8:4a:
         fa:ea:4c:20:27:ae:56:d7:b7:eb:74:75:ee:36:28:0f:27:b7:
         23:8d:96:06:db:83:19:65:a3:0b:40:58:a3:a0:4f:dc:f5:2e:
         d0:60:ad:6e:97:53:c8:9d:31:b8:40:46:57:1d:34:14:85:f8:
         5e:46:71:c6:39:6e:2a:9f:fe:2a:9a:2e:c9:9c:2b:03:d4:b9:
         e5:ad:d3:de:37:af:12:99:82:72:56:b8:c8:9c:c1:12:88:f7:
         28:27:3d:e0:3b:58:d1:c2:73:d3:80:c8:c6:7d:f3:dd:ac:52:
         7d:16:7b:2a:e1:ce:af:d7:b5:d2:85:a4:20:de:ae:96:47:7b:
         fd:21:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org