Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa
File:                     9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa (raw, json)
Hash identifier:          PJxyDMv8KOFpA48qTzQcrOvefiDht/9pCvcjxFmqnbg=
Subject key identifier:   8F:3D:E7:AC:14:4A:3A:27:AE:68:B8:32:91:B7:AF:37:02:E4:AF:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B871762DA17C0622E83B8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.4.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:87:17:62:da:17:c0:62:2e:83:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=8959a2ff-9727-4eb9-b10f-58794f128226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:6f:f7:54:71:96:d4:c8:2f:48:ce:aa:e2:
                    91:bf:db:cb:53:05:16:d8:63:32:97:05:e2:04:c9:
                    5a:d8:df:dd:a1:2a:12:1b:c7:82:27:21:2b:e0:76:
                    39:ac:ba:e4:b3:bb:b7:df:ca:e0:12:69:99:68:4e:
                    63:1d:bd:c4:89:9c:c1:e7:38:3d:af:d2:94:6a:c3:
                    25:e9:ec:d2:0d:b2:af:b3:d1:27:07:93:05:20:78:
                    da:34:d1:62:fc:c8:7a:bc:c7:0c:86:4d:74:a3:61:
                    51:0e:48:8b:43:f2:5d:74:da:ff:12:cb:98:92:6f:
                    05:c8:50:63:c9:20:20:1d:89:62:7a:a1:ff:35:06:
                    1e:50:9a:4a:54:7e:e7:bf:d7:03:44:90:76:05:a0:
                    93:84:9e:f9:3b:b4:3c:88:ae:55:77:01:cf:f9:05:
                    c9:1a:ac:93:59:61:e3:75:ce:ac:c7:91:56:3c:4e:
                    55:6b:6b:c0:8e:33:00:10:58:2c:0e:39:24:a8:8a:
                    d7:e0:39:ff:3a:5c:c1:fe:d1:3f:da:ba:e2:37:3f:
                    10:58:93:98:45:6d:01:12:5e:21:43:e7:9b:e8:77:
                    cd:ba:c7:3e:0a:68:99:c2:dc:57:0d:8a:05:a5:ca:
                    8d:c3:6c:b1:ef:0c:af:b8:e6:c4:c0:42:08:af:12:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:E7:AC:14:4A:3A:27:AE:68:B8:32:91:B7:AF:37:02:E4:AF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.4.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:1f:e8:05:8b:ee:de:e3:07:35:6e:18:bd:e7:55:5b:72:
         df:bd:88:94:ee:67:61:cd:67:e4:df:7e:46:fc:dc:83:84:6f:
         49:d4:33:61:91:df:32:eb:b0:c7:17:3e:60:7c:cb:c8:15:89:
         e2:76:65:96:d3:de:a2:8b:fa:5f:d7:db:66:21:37:80:84:d1:
         80:ce:b9:49:61:1e:67:8c:2c:b0:1d:d7:cc:8d:b4:c2:1c:93:
         13:d9:ed:37:8c:52:b7:4b:78:4c:99:a8:56:69:39:bd:b7:b3:
         e6:1e:08:75:c8:ef:51:0a:ec:65:d6:be:c5:eb:a6:05:35:ff:
         46:0f:01:6e:a4:29:c0:fb:7b:41:fe:44:9d:f1:6e:4d:e0:f4:
         8c:5b:b7:ba:51:47:90:fb:98:78:88:f1:90:a5:7a:3c:c8:9c:
         06:45:65:c8:46:c3:e9:61:d8:f7:a4:52:a2:73:c9:3a:5c:b4:
         f1:eb:32:41:20:4a:92:ae:d3:cc:11:bc:65:ff:f8:93:2b:1b:
         48:16:54:9f:9a:6c:b7:f6:bf:d9:76:76:4b:26:df:3d:3b:49:
         1e:25:13:73:d9:a3:25:1a:fe:eb:75:a1:cc:3e:3a:92:fa:43:
         eb:65:7f:26:ec:7b:a4:de:5f:0f:42:d7:5c:9f:99:fd:74:26:
         f1:aa:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:42 2024 by rpki-client on console-fra.rpki-client.org