Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
File:                     04448196-f240-3d49-bb9a-bf23e58b6bb1.roa (raw, json)
Hash identifier:          zP/uxe3QOq2QZ8fPT6Gx3XA9BkwfTK3OovreErATAd8=
Subject key identifier:   D6:42:57:AD:CC:48:1F:C1:22:F6:B2:12:04:E1:C3:5C:CA:64:8F:83
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285847C1DF58C0834F2A696787A380
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     21559
IP address blocks:        167.94.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:58:c0:83:4f:2a:69:67:87:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=81f4c9a4-f911-48ba-84a9-6211207d3d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:d5:e4:b3:97:40:59:82:b9:21:ba:df:6d:
                    d8:ff:64:f8:70:5b:c8:46:26:87:2d:67:c3:96:b5:
                    cf:88:8d:bf:f4:f1:7b:4a:db:4c:6d:31:64:ca:50:
                    dc:77:eb:34:26:c5:ac:a5:8b:44:ed:a7:70:36:74:
                    9f:42:2e:58:61:51:28:4a:87:3e:5d:d8:68:a3:a5:
                    7c:89:af:02:5c:c5:3c:50:e3:6a:97:03:3a:71:c6:
                    99:26:90:ac:09:1c:18:cc:52:14:a1:bc:50:8e:b5:
                    46:3d:1c:90:58:54:77:43:11:eb:86:51:4c:4c:a7:
                    e0:b1:d7:ea:4d:8f:f2:b2:af:d7:53:85:f2:7f:c3:
                    bc:2c:0f:4a:b7:53:0d:bc:b4:39:75:67:3d:8d:43:
                    30:9e:b8:94:63:9a:45:e0:6c:93:33:23:9c:c6:68:
                    5d:36:45:60:a1:eb:89:9f:21:79:21:d9:bc:57:63:
                    17:6e:4f:7b:cd:89:49:f2:12:aa:e3:84:97:e6:eb:
                    37:d2:93:58:40:87:aa:9e:eb:16:37:ce:1e:00:aa:
                    1d:67:95:b7:db:34:fa:eb:59:b4:7e:bb:6a:f0:1e:
                    f8:2b:b1:f2:22:8b:cc:c6:69:be:ad:de:20:12:3f:
                    48:13:56:4b:62:cc:a1:fa:53:92:d8:79:15:da:78:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:57:AD:CC:48:1F:C1:22:F6:B2:12:04:E1:C3:5C:CA:64:8F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:70:fe:a4:ea:6b:2a:16:ef:15:64:66:08:c9:ad:4b:dc:
         57:21:a7:7b:10:b1:92:90:f1:43:0e:ae:8a:3c:77:d4:fc:0d:
         7c:4d:68:b3:77:da:3d:3f:98:3e:80:93:e3:9f:73:e6:a9:17:
         5c:5f:20:8a:f9:f6:1d:b7:a6:f2:2b:90:bf:59:ab:70:8e:64:
         85:a1:d5:50:f9:81:40:2e:6b:15:19:c0:28:3f:cb:8b:9f:c9:
         ad:b9:7d:22:76:f4:9a:f3:1d:93:41:cd:cb:46:fd:34:4b:7a:
         a7:f7:28:35:cb:60:e9:ab:72:ac:01:93:be:d9:8e:46:8d:2b:
         24:ef:6f:aa:4c:6b:ed:15:5a:e6:ea:68:1b:fe:10:86:94:68:
         37:16:86:57:87:e7:73:80:ee:f9:0a:d8:d2:f9:3d:5a:54:1d:
         9f:ca:42:17:2f:48:06:cb:d5:af:83:cf:c7:c7:2b:31:8d:6a:
         ad:d4:f8:b8:43:d0:63:6b:e9:cb:0b:b0:25:31:66:1a:99:26:
         d2:9f:e4:de:2a:a3:20:92:f6:e5:82:cb:0f:19:f5:d0:4c:d2:
         6e:3f:96:0e:89:a1:f4:4d:11:01:c5:14:7e:36:66:06:af:c2:
         db:47:1b:51:f6:c6:8f:68:0d:58:01:89:be:5a:47:2e:2c:d7:
         ac:5c:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org