Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
File:                     4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json)
Hash identifier:          mYTbCAYgL7DiPiYLKEx1D83Hmvo9ENSqPPnyHsSdRPE=
Subject key identifier:   1D:37:DE:FE:E9:DE:AD:86:D1:3E:E9:F4:D1:B4:5A:93:7E:B3:C4:A1
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F43285847B3CC115F3FC9D803AACD9B00
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     91
IP address blocks:        192.12.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:11:5f:3f:c9:d8:03:aa:cd:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=1edaba10-ab4a-49f0-8a3b-83db2774c5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:25:81:27:dc:07:2c:31:c5:14:c4:4f:c5:
                    0a:a3:34:5a:51:04:7e:ca:05:22:6a:c3:c1:ed:1d:
                    af:e5:f3:99:6a:24:81:2e:27:17:e0:bf:b8:07:f7:
                    39:a1:25:b8:d2:b9:7b:ec:bb:4e:82:c2:32:3a:af:
                    41:88:1d:e9:83:4d:de:6d:1f:3c:db:39:df:12:84:
                    eb:62:1f:46:61:c8:53:51:77:34:01:6a:e5:ef:e4:
                    26:9d:da:c7:f1:0c:bd:95:60:25:9b:c5:30:51:b1:
                    eb:eb:10:c2:9b:14:04:48:82:7f:d5:0d:2e:36:3a:
                    a9:2e:a2:f5:b9:a0:3f:b8:70:e7:9d:6a:6f:fb:9a:
                    6f:13:49:3a:6d:e0:48:50:35:b0:8e:68:2d:17:a7:
                    d9:75:3a:97:c2:ee:7d:db:b0:fc:20:3f:0a:41:d2:
                    64:88:e5:99:87:bb:9c:c8:f1:e6:fa:6d:07:34:33:
                    c7:7b:8c:2c:20:47:5e:c0:d9:fd:aa:9f:fd:b5:2e:
                    33:17:9c:64:41:ad:a7:60:1e:bf:a3:12:f9:cd:a3:
                    9c:f4:ce:83:78:cf:91:5e:91:b3:f5:e2:cd:2f:ff:
                    9f:20:f3:f8:84:41:3b:86:c1:f4:91:03:c6:ca:4c:
                    e0:82:85:17:2e:b9:e3:bf:6c:1a:b3:72:83:41:cf:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:DE:FE:E9:DE:AD:86:D1:3E:E9:F4:D1:B4:5A:93:7E:B3:C4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c2:4e:35:aa:af:f0:16:12:ec:b3:39:ad:7a:67:f7:4b:92:
         94:1d:09:c7:79:32:2a:ab:3f:14:58:fe:77:50:61:dd:b7:87:
         74:10:dc:af:85:3a:4b:66:45:be:4b:5c:be:7d:49:00:8a:86:
         96:10:87:42:bd:88:77:74:d5:1b:59:8d:cb:ae:6b:c4:74:d5:
         c5:86:5e:8f:08:96:8f:46:9e:ab:bd:82:b2:32:8d:dd:79:e2:
         fb:d8:a5:a8:ab:71:9c:08:ff:df:2c:b9:33:37:63:d3:dc:eb:
         f4:ea:01:74:99:1d:09:a7:6b:48:96:7b:17:a2:18:8c:e2:d8:
         d5:ab:13:8f:7c:2f:5d:d7:15:97:e3:5d:6d:9b:73:a8:de:9a:
         31:08:65:7f:5f:03:4b:0e:68:85:ec:0c:b7:5c:44:00:ff:99:
         4a:f9:ab:6a:4c:f9:09:3f:9d:b9:c6:2e:03:09:fd:f1:cb:e9:
         72:32:1a:5c:91:6c:b7:2e:c2:e3:45:1e:21:6d:42:45:42:17:
         28:62:40:1c:50:3e:ca:27:96:81:99:3b:f5:f0:ae:aa:78:e8:
         11:45:22:b5:7a:5f:63:19:f5:46:86:c2:25:e2:51:41:2e:15:
         1d:05:8e:b3:4d:f8:30:e3:2d:2a:f6:93:66:c5:64:e2:54:a0:
         d3:a0:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org