Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa
File:                     6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa (raw, json)
Hash identifier:          IJ4oNkyf4Pr/aKudsS5XD1Z0JBF587muZvzMOGO67AQ=
Subject key identifier:   1A:DA:EC:89:D0:7B:FF:7B:BB:24:F9:3B:D1:47:72:29:08:47:54:2C
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858471775B7F524D551BDCB10A510
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     198949
IP address blocks:        144.196.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:b7:f5:24:d5:51:bd:cb:10:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=f5e3dca1-92c3-467f-bc74-c2ae6aab2e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:aa:20:f3:7f:06:ab:c6:cd:31:ef:cb:d2:
                    12:27:e2:55:ff:dd:a0:a5:c1:f6:a8:af:f9:9b:22:
                    5c:36:01:1b:f4:38:8a:b7:4f:b7:ef:8c:e9:63:01:
                    ff:ac:61:4f:93:c4:42:9c:69:e4:82:3e:2e:1f:1d:
                    1d:16:f1:1c:90:a4:83:f9:35:a5:d7:59:4b:d5:99:
                    a7:83:40:46:5d:66:84:e4:ef:2d:e4:73:c2:5f:68:
                    e3:62:fa:c2:06:49:4c:30:d3:fc:52:7f:3b:46:bb:
                    8f:05:60:e2:28:4d:be:56:ea:81:af:f2:ad:92:62:
                    b0:97:32:0d:f5:96:fb:fa:4e:ca:0b:43:6e:8a:17:
                    71:c0:d8:f1:21:24:e3:a4:f8:7c:9e:f4:b7:8b:fa:
                    e0:8c:a1:41:e6:88:5b:73:3d:9f:00:2c:e5:7a:e5:
                    e8:6e:83:ff:81:77:fa:d1:61:aa:06:08:12:4d:6d:
                    5d:28:2e:07:79:ab:d1:bc:b2:28:b1:45:54:36:4b:
                    c1:b9:6e:bf:ba:68:94:b6:a3:89:3b:e2:ce:ff:72:
                    1b:74:97:e0:6b:6a:7c:47:df:ed:7d:ec:08:39:09:
                    1f:8a:21:4e:76:f8:df:b0:81:f7:24:27:4b:e5:ea:
                    aa:7d:0f:ec:16:8e:88:ed:19:87:bf:eb:72:d2:48:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DA:EC:89:D0:7B:FF:7B:BB:24:F9:3B:D1:47:72:29:08:47:54:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:59:c3:2f:f3:a5:6e:72:bf:01:e5:f5:62:0c:9a:a0:88:14:
         ef:5e:49:a5:ed:72:f7:d1:36:88:1e:87:25:2c:20:91:f3:6a:
         36:c9:8c:9f:bc:70:73:f8:ee:ac:fe:b3:b4:56:3f:f8:0d:6f:
         e8:3a:d2:88:6e:1d:98:b3:2d:3a:23:1b:06:c6:78:7a:43:ec:
         49:85:9e:06:c7:e6:49:18:fa:da:d2:0c:7c:cd:e3:8c:06:c9:
         82:60:40:9c:92:55:3d:29:35:d6:60:c3:5e:50:9e:50:79:c3:
         aa:34:15:8f:92:b0:6b:b4:af:25:94:e0:ad:7a:0f:35:e9:27:
         b4:35:80:33:63:a7:11:19:2c:73:d8:92:ea:ae:d5:f8:e6:b7:
         92:49:4a:fc:ee:de:aa:fa:96:20:5f:ea:ce:06:f3:13:0a:44:
         26:e9:f7:a0:fb:5c:ff:ca:d2:90:66:9c:e1:bb:4b:79:44:d3:
         fb:bd:d4:f8:eb:98:e0:8c:ec:c6:8e:43:40:91:14:67:6f:ed:
         58:a9:09:dc:c1:b9:4b:5a:c4:c5:6b:14:dc:90:c5:0e:99:ed:
         29:c2:d2:92:cf:f8:46:72:fd:93:5b:a8:55:d1:8b:d8:7b:f9:
         96:94:0c:99:54:9c:4c:e2:b4:d8:b4:e3:1e:43:01:30:00:92:
         dd:f2:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org