Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa
File:                     a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa (raw, json)
Hash identifier:          F1QwQPkl8V8HUDajKKfoxzsmJU0gggj2AfWwCfX7GKM=
Subject key identifier:   41:86:DD:45:21:C6:E3:FC:E0:B7:10:FF:00:86:44:3A:68:68:EA:65
Certificate issuer:       /CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3
Certificate serial:       010D0C9F432858484E4B2D5B077E237FC7D90A80
Authority key identifier: 7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa
Signing time:             Mon 23 Dec 2024 21:11:25 +0000
ROA not before:           Mon 23 Dec 2024 21:11:25 +0000
ROA not after:            Sun 23 Mar 2025 20:11:25 +0000
asID:                     54014
IP address blocks:        192.245.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:4b:2d:5b:07:7e:23:7f:c7:d9:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3
        Validity
            Not Before: Dec 23 21:11:25 2024 GMT
            Not After : Mar 23 20:11:25 2025 GMT
        Subject: CN=34ebdc9c-5681-4c3b-9d66-4c5e83dd0b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:d3:13:0f:e6:a4:88:5c:01:91:3b:09:63:
                    8a:90:5d:e8:17:ac:ca:c5:9f:7b:68:db:2a:52:97:
                    75:a4:68:7c:87:b8:94:f6:49:97:d0:04:05:d3:19:
                    00:74:d2:16:e1:cf:92:6e:54:ef:4d:dc:07:e7:1e:
                    e4:d5:c6:63:41:9c:e2:8c:e0:23:2a:05:ff:5e:14:
                    fe:a7:0c:85:ce:d8:e0:88:de:9a:a3:8b:ca:d0:7d:
                    b8:25:7b:6e:72:3f:3a:be:0c:a8:b0:ec:24:2a:f2:
                    24:96:c2:f8:4d:aa:18:76:6b:6d:84:2b:f7:8b:a8:
                    1e:ee:c2:05:a1:00:55:0b:98:79:2a:f9:c9:59:80:
                    12:e6:e1:33:35:ab:3f:04:9c:a0:50:b5:36:53:dc:
                    dc:fa:a1:b2:fc:79:a6:f5:ca:bd:78:ab:53:3b:ae:
                    3d:89:f8:87:1a:0d:5f:c2:04:d6:ca:19:18:94:0f:
                    2b:84:1e:6e:97:73:17:7d:10:bf:b0:58:05:81:df:
                    68:fd:e8:f2:b6:58:a4:e4:b9:d8:37:71:58:49:19:
                    3b:69:db:bd:82:6b:f8:6d:95:83:3e:4c:a8:a2:ff:
                    62:80:0e:ce:64:76:24:dc:34:29:56:10:7c:9a:bd:
                    9c:ed:10:a1:65:14:09:2a:b6:26:5f:48:b8:b7:b0:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:86:DD:45:21:C6:E3:FC:E0:B7:10:FF:00:86:44:3A:68:68:EA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl

            X509v3 Authority Key Identifier:
                keyid:7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:2f:4e:c4:d2:e6:80:84:53:58:6a:19:c3:40:ec:a2:5c:
         09:71:01:c5:90:ce:8c:3f:9b:8e:7a:e5:ea:ef:e4:02:b5:36:
         ec:d4:20:1a:1d:cd:b9:48:d7:35:95:81:56:de:14:4e:f4:2a:
         bb:bc:40:17:fb:bb:1f:96:29:3e:58:19:a6:3e:b1:c0:92:65:
         61:36:e5:11:3c:d8:50:25:b0:da:73:43:da:56:21:40:24:36:
         9f:5c:af:76:ef:00:a7:dd:f7:ae:86:2b:30:96:f8:85:35:0f:
         35:57:9c:84:99:ee:93:e7:17:36:e4:e5:72:7c:a2:4b:8d:3d:
         74:6b:46:ec:50:9e:d6:48:e6:3e:5f:ab:76:bc:72:4d:b3:3b:
         e3:04:51:41:b4:af:fb:38:90:e5:92:af:4e:5b:23:25:01:f6:
         18:29:10:e1:36:59:e1:d3:7d:fb:db:a2:38:44:2d:60:c7:aa:
         6b:8e:52:cd:6a:2a:02:0d:ca:2d:5c:10:8d:19:2c:80:e9:e8:
         02:19:71:89:3b:f3:84:34:ce:68:60:55:8a:cf:ec:93:d1:95:
         24:00:6e:3f:0b:bb:66:c9:79:9f:9b:50:57:ca:86:e1:b5:be:
         d6:d0:a4:9b:75:71:6a:46:9f:ed:5d:9c:d3:39:14:18:88:f5:
         47:cd:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org