Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
File:                     a30c69af-4a9f-3c4c-8d54-b9102c913071.roa (raw, json)
Hash identifier:          4vToicezXyOGZVOoNieHglGg37+T954VdQa95R53Sio=
Subject key identifier:   DF:6C:C0:9B:0A:41:60:05:77:56:E1:5D:6D:24:C1:76:E9:D1:7D:96
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F43285845CB3E4FC6E59561EA2F8F3040
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     21693
IP address blocks:        192.92.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4f:c6:e5:95:61:ea:2f:8f:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=eb86ced9-abd0-42ea-b478-b27789e24eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:f7:ce:7d:e9:24:ac:79:16:63:a2:8e:52:
                    f8:97:4a:9f:44:fa:7c:2c:9c:02:14:9b:45:86:63:
                    98:69:f5:c7:d3:9e:63:88:0f:d2:d0:4a:f1:93:02:
                    18:da:a5:ac:e7:1d:94:2a:86:ca:2e:29:68:6b:88:
                    ff:70:b0:ec:c5:a2:57:1c:a0:2b:c6:03:0c:cb:39:
                    1d:27:c6:02:5b:f3:b0:25:c6:ed:86:f1:e3:e2:0e:
                    8d:00:04:80:ad:db:03:a3:6d:ea:bc:1b:5a:eb:e5:
                    21:9e:dd:ae:b7:fe:b8:41:9e:10:1f:54:6d:ba:52:
                    f6:3f:de:4b:8e:d9:2a:6a:56:05:ab:1d:98:a7:e2:
                    c0:3e:2f:0e:e6:5f:ef:cd:e9:9a:91:5d:73:3d:39:
                    91:05:61:a0:50:b6:8e:b4:57:08:6a:60:ce:a9:e1:
                    42:9e:8a:2d:4c:41:d0:d5:d9:03:8e:e3:03:d9:a7:
                    30:fd:3c:83:f9:ab:be:b1:2f:62:86:90:41:5e:f5:
                    df:e2:01:cb:ee:e0:06:50:f9:85:04:9e:01:ab:cc:
                    a0:42:63:e8:4a:bd:6b:27:87:3e:6e:f7:c6:c9:44:
                    e2:8e:3e:c7:b8:e2:fe:2f:59:f7:96:8e:9f:95:ad:
                    0f:8c:cb:d6:d5:a0:00:f2:75:d2:70:8d:86:32:b9:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:C0:9B:0A:41:60:05:77:56:E1:5D:6D:24:C1:76:E9:D1:7D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e5:00:81:4f:eb:eb:3b:d5:52:8e:9e:f5:32:c2:ec:80:d0:
         31:0c:7e:85:93:9e:a4:a3:a3:7a:67:57:b0:3e:98:55:f7:50:
         37:94:27:fb:5c:30:df:5d:02:42:63:00:27:8a:a3:be:cb:c3:
         c8:6d:8d:0f:1d:59:c2:ea:2e:18:fd:9a:e9:72:bb:84:f9:5c:
         75:7d:4c:af:0d:ed:97:08:29:a2:bb:e9:e3:53:ef:5a:d9:17:
         95:2f:b5:38:63:23:34:b3:45:a9:2b:11:73:72:ad:db:89:4e:
         83:a6:63:51:b9:04:be:18:81:36:ac:8a:8d:6e:4a:ad:7d:49:
         94:7e:4d:5f:a9:67:96:dd:68:bb:87:f8:b4:92:1b:63:cc:a4:
         a3:ce:8d:00:30:f2:c4:80:da:f9:b0:9d:d2:65:27:a9:0b:66:
         f5:f6:73:cc:1d:5e:c7:29:7a:be:93:97:d9:56:83:2f:a2:60:
         06:48:f9:48:65:d7:03:8d:ae:45:54:3a:d2:07:5e:69:91:09:
         11:45:25:5d:43:89:4a:12:f0:4e:cd:de:a5:47:c4:31:aa:a8:
         39:cd:1a:d3:b1:46:ed:5b:3e:8b:99:6a:07:d0:44:53:02:77:
         78:f4:10:92:58:03:38:dd:a5:fe:bb:36:34:e5:c4:a2:9d:b7:
         c4:eb:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:42 2024 by rpki-client on console-ams.rpki-client.org