Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
File:                     eccac3b5-2c7c-3879-9fc5-610d0781a706.roa (raw, json)
Hash identifier:          U4I+kVM//PMAF2YalA14/iV37tsLVm+uyjBqsFqDgY0=
Subject key identifier:   38:0A:25:4A:4D:2A:AF:68:73:5E:34:22:36:57:60:EF:7C:08:0E:5F
Certificate issuer:       /CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
Certificate serial:       010D0C9F43285847DC64A1280DF9DB7FB2A0E300
Authority key identifier: 77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        192.26.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a1:28:0d:f9:db:7f:b2:a0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=83a2c2ce-d380-4374-843e-f2d409f7f106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:29:1d:33:49:c6:1a:53:11:e7:62:e6:69:
                    31:0f:76:7c:4e:81:1c:83:1a:87:16:22:37:40:9c:
                    82:6d:15:69:b6:87:92:73:29:e3:63:1a:d0:43:f5:
                    3f:02:d1:9e:5e:fa:f1:eb:fb:a9:f1:54:3a:af:47:
                    3b:b6:35:49:ed:92:17:c4:21:37:53:c3:b2:2e:75:
                    03:80:a4:7a:34:6a:6e:8d:bc:cb:8c:bd:ba:4e:4e:
                    55:0a:47:bf:c5:b0:28:89:32:4f:e9:9f:05:04:8b:
                    fd:de:1c:02:c1:cb:2c:cf:b6:3b:08:41:cf:aa:23:
                    0e:6c:bd:17:45:d7:bd:20:8c:0d:21:fc:6d:80:bc:
                    88:ef:07:52:03:7a:98:ce:65:04:1a:e8:7a:fc:ec:
                    76:06:a5:ac:41:6d:76:70:40:8d:b1:e1:24:60:80:
                    cf:99:d7:53:16:e5:39:63:98:b3:d2:a4:4c:a1:bc:
                    4d:0f:e2:e0:e4:ba:89:95:fa:51:03:69:23:c2:8e:
                    3a:0b:53:3d:41:69:f2:e8:23:2f:ac:2d:55:74:10:
                    c6:a8:46:72:f9:75:61:00:54:a9:f4:a1:7f:dc:9f:
                    b6:1f:e2:c5:70:b7:7b:4d:34:77:0b:ed:ae:a8:40:
                    5d:04:aa:6d:ae:45:77:17:53:3e:3f:d3:78:6f:56:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:25:4A:4D:2A:AF:68:73:5E:34:22:36:57:60:EF:7C:08:0E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl

            X509v3 Authority Key Identifier:
                keyid:77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:38:65:27:c6:41:83:58:7b:9c:43:8d:b3:dd:1a:fa:80:
         32:0d:46:f0:9c:e8:8d:20:aa:c8:f7:fe:ae:67:95:ee:88:4e:
         86:a1:14:a0:db:3c:ca:f3:ac:e4:fc:a8:0e:ce:06:5b:92:e0:
         a8:9e:c6:0b:7e:d8:c5:e1:80:73:40:7f:81:a4:a0:d2:11:b8:
         7f:40:98:eb:5e:dc:50:f3:e5:d5:f0:11:28:94:a8:99:6b:98:
         a3:be:7d:9b:c6:de:75:32:0c:aa:27:9c:72:b1:dd:ff:6f:64:
         69:b2:44:22:16:90:45:76:74:ef:39:f9:1b:0f:18:11:2f:d8:
         32:71:f8:74:46:cb:6a:a8:92:fd:91:5d:26:0f:1b:50:5b:f4:
         29:81:b0:79:15:b9:c6:cd:01:ed:53:d9:c6:fb:6d:b3:08:27:
         71:9c:69:b7:93:79:35:7e:b9:57:ee:99:ed:f4:02:c3:ff:4d:
         dc:20:9d:bd:22:2a:54:4a:f4:0f:59:a9:aa:af:a5:a7:4d:8b:
         46:5a:eb:12:54:a2:50:0f:62:33:09:38:8b:44:42:2b:38:95:
         af:8f:ac:c0:59:15:69:d7:05:77:72:50:8e:30:0c:80:cb:41:
         fa:15:8b:69:93:ae:4c:12:df:c0:c5:dd:ac:c4:04:98:9c:c6:
         b0:12:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:09:58 2024 by rpki-client on console-ams.rpki-client.org