Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/a6385ee4-2792-36c3-8c3d-18f94931f9bb.roa
File:                     a6385ee4-2792-36c3-8c3d-18f94931f9bb.roa (raw, json)
Hash identifier:          2DKky4jPvwfO084jDScVB50j/v1uBVgFTqzW8Q83Ldo=
Subject key identifier:   1E:5A:4B:8A:26:08:E1:D9:EE:A8:E1:F8:6B:46:B4:10:CE:F5:DC:5E
Certificate issuer:       /CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
Certificate serial:       010D0C9F4328584726D07EBF68D884AA56969300
Authority key identifier: C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/a6385ee4-2792-36c3-8c3d-18f94931f9bb.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        192.158.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7e:bf:68:d8:84:aa:56:96:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=2bc1ed0d-acf7-4fcb-913d-9e0a25c133e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:00:bd:d2:3c:03:dc:3d:67:92:61:73:50:
                    41:2e:d2:60:61:cf:2e:72:b8:61:e0:ca:90:07:a1:
                    6f:0c:c9:80:e4:a0:0c:94:ed:e0:c7:ef:67:ac:10:
                    cf:fa:b3:64:c4:54:43:f9:88:b4:78:83:93:9e:6d:
                    62:db:f6:b6:af:34:52:cd:0d:4b:c1:11:f9:97:c3:
                    ba:ab:8c:2d:36:3a:a1:12:1c:dc:0a:c8:c0:4a:5a:
                    59:ab:11:bd:e5:58:c2:21:11:1d:c2:17:c5:77:22:
                    39:c4:e0:c7:e0:11:31:57:b8:77:4c:c0:4c:ba:f5:
                    a0:4c:ee:49:ae:5f:14:a5:40:5b:4a:5e:6e:7a:7f:
                    00:e2:44:78:c7:b4:4a:e1:7f:73:ef:b6:3c:82:37:
                    6c:f5:9e:33:53:8f:f2:18:38:bb:06:c5:7c:cc:41:
                    ec:4d:83:47:3b:29:aa:09:bf:9f:87:9b:60:39:b8:
                    97:6e:18:7f:4e:c0:66:8f:9b:ee:c6:a3:c1:13:62:
                    66:45:78:85:0e:9d:6e:28:92:4a:94:45:88:af:37:
                    3b:67:df:8c:1a:98:e7:64:cc:97:7a:ec:f2:3b:70:
                    8d:ae:70:cc:de:91:89:2c:bd:6d:e6:f6:40:3e:19:
                    de:80:b9:8e:92:8f:51:78:5a:72:5a:a5:75:75:b3:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:4B:8A:26:08:E1:D9:EE:A8:E1:F8:6B:46:B4:10:CE:F5:DC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/a6385ee4-2792-36c3-8c3d-18f94931f9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl

            X509v3 Authority Key Identifier:
                keyid:C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e7:42:02:21:09:a8:8e:66:f1:bf:b2:bf:8a:49:89:96:09:
         48:3a:55:d0:84:fc:44:e2:80:69:c3:58:5d:ba:c9:2f:1b:2c:
         c4:dc:2d:fd:d6:83:41:58:9b:a8:92:5e:a3:ee:d4:bc:e0:c4:
         45:eb:de:f4:e3:6b:1d:c4:d9:9b:5c:49:fc:29:2b:b0:e7:ba:
         ca:67:3a:10:c1:07:3e:b8:81:ec:13:8d:f3:87:26:17:af:c9:
         84:ab:7e:d5:3f:ce:fd:bb:f4:97:54:6d:19:fc:c4:d9:43:fc:
         1f:85:89:a7:31:2a:52:da:aa:4d:de:f4:3a:7e:eb:75:be:b0:
         8d:25:f9:6a:f4:2a:93:e2:a5:67:7d:ac:89:7b:43:e5:96:6d:
         4d:1a:39:30:17:82:e8:25:b1:4b:26:89:5c:dd:4f:d8:cc:8f:
         cf:01:73:da:14:c4:40:ec:5a:92:1f:e5:55:2f:59:3d:03:81:
         82:6d:68:90:7d:58:be:91:01:56:05:87:c6:93:1f:36:1a:30:
         99:51:54:c3:e3:04:41:27:0b:39:d6:8e:20:1f:31:60:92:6e:
         a3:bf:ce:15:a3:55:6b:44:3d:e1:3d:33:a6:34:75:fc:6e:bb:
         2b:f1:84:e7:e1:ad:8b:e5:41:4e:27:14:4d:a0:59:13:ec:6c:
         85:27:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org