Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa
File:                     bbd41846-8a02-377d-95ea-451b2a008e18.roa (raw, json)
Hash identifier:          h9DV4Un1EBMCTAXB7vAHwje6g6ihUKDXY/+pvO8a7+I=
Subject key identifier:   EF:9D:93:07:8B:41:0E:C4:2C:10:01:5E:14:AD:D8:5F:D9:8A:69:9D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847A3EF55CA32F78B3640F68B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa
Signing time:             Wed 23 Oct 2024 20:38:56 +0000
ROA not before:           Wed 23 Oct 2024 20:38:56 +0000
ROA not after:            Tue 21 Jan 2025 21:38:56 +0000
asID:                     15169
IP address blocks:        192.178.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:ef:55:ca:32:f7:8b:36:40:f6:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 23 20:38:56 2024 GMT
            Not After : Jan 21 21:38:56 2025 GMT
        Subject: CN=8b6c0b83-2d8a-4ee9-bdba-aa2ab98bf318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:1d:65:8a:50:1b:cb:0c:ca:0f:0d:87:02:
                    34:ea:e9:e5:7a:c0:5e:f2:7f:52:cd:c8:92:2c:a5:
                    a1:c7:cd:44:fd:e9:2c:6f:75:55:2d:c5:10:81:c2:
                    cc:3f:76:7b:62:aa:37:c9:78:8f:24:f6:aa:4f:58:
                    9e:ce:5e:d0:9a:45:54:6e:fa:36:4b:8b:11:6b:f4:
                    b0:5d:58:cd:df:bc:af:1e:cc:c1:53:4a:6a:ac:71:
                    9d:4e:d6:c7:16:91:12:4d:08:9c:5a:dc:f4:4f:8a:
                    a6:2c:24:e3:ff:b9:76:a0:02:90:28:eb:c6:16:f5:
                    fd:0d:b0:50:6a:64:1e:bd:d5:46:f5:60:dc:f2:11:
                    70:e4:8f:65:4f:81:46:34:ef:a3:f8:ea:4d:90:47:
                    5d:43:96:1e:6e:90:fd:bf:d7:81:dc:1d:94:3e:1e:
                    cf:3d:b3:d7:0f:97:71:3d:47:b0:e0:d3:ae:ba:49:
                    1b:0c:a1:68:95:28:52:bb:63:aa:72:75:31:7a:03:
                    86:3a:a7:6d:c2:b2:98:8b:2b:b5:ac:18:41:a6:17:
                    20:1b:26:10:37:ed:a2:62:5c:85:c4:9d:02:bb:ae:
                    b0:be:40:2e:0e:84:f5:39:e3:69:de:61:eb:aa:1b:
                    c0:65:2d:e6:f5:b9:fc:ea:86:46:34:05:03:e8:fd:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:93:07:8B:41:0E:C4:2C:10:01:5E:14:AD:D8:5F:D9:8A:69:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:62:2b:72:3e:18:87:5f:93:9c:d2:b9:9c:7c:5b:d3:42:2b:
         7e:d0:7d:c8:e6:42:85:82:7a:4d:7f:e3:05:f3:8e:62:0e:aa:
         c9:fb:7e:64:b6:a1:de:45:2d:0d:82:25:bf:29:60:c3:52:00:
         2a:a1:bb:ff:64:c5:1e:ce:36:aa:05:b4:1f:65:94:16:d9:fb:
         17:d3:e3:7d:9f:24:57:6a:0b:5f:cb:63:a7:44:a6:2b:13:e6:
         a4:32:dc:45:da:10:9a:c5:fd:ef:61:33:41:9c:2c:9f:86:34:
         27:4f:8b:59:82:15:a7:fd:d5:3a:ff:49:4e:2f:6c:1e:61:ee:
         96:ee:24:cf:35:4a:8e:b3:e3:8e:8a:69:ca:57:96:f0:fd:97:
         21:26:f6:88:ae:66:87:6c:ca:91:c3:75:d7:de:4d:5e:e9:98:
         f1:66:ca:01:bf:09:d5:7b:4a:8b:cd:36:f2:ec:f3:1b:6f:b4:
         c0:84:02:e8:26:19:1e:2e:65:12:cf:ad:48:22:a5:03:dd:2e:
         a6:cd:7d:37:f4:4a:a7:c4:d3:70:39:e5:d4:8e:b5:50:4c:c4:
         04:ce:e2:00:d7:4e:61:98:23:78:c7:9a:d6:53:f8:33:a2:ac:
         c7:c5:e7:a2:9e:7d:13:58:62:e3:fa:19:78:46:d8:f1:2c:fa:
         54:cd:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org