Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/863d3362-b985-3a3f-9766-efde4e5f0064.roa
File:                     863d3362-b985-3a3f-9766-efde4e5f0064.roa (raw, json)
Hash identifier:          ybU/OFMG2/FIzacqjmECL+lUxJ22vlJy3yflQD+Ck9Q=
Subject key identifier:   CB:38:D3:3B:A7:CC:44:F1:99:AC:17:79:80:06:56:9F:9D:A4:22:F4
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285847DC64B21B068E774D6EF6A000
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/863d3362-b985-3a3f-9766-efde4e5f0064.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     13445
IP address blocks:        144.196.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:b2:1b:06:8e:77:4d:6e:f6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=e08ca260-4193-4c68-8f74-12976d2a0e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:e8:7a:42:db:cb:0a:40:f4:2b:81:21:3a:
                    6e:84:da:55:20:85:5c:f0:db:7c:c6:b1:86:12:8d:
                    fa:c9:02:8d:a1:d7:4c:52:05:54:e5:da:b8:52:fc:
                    cd:b1:7b:02:9a:96:30:0f:e2:bc:fc:0d:7e:49:2e:
                    d1:97:4f:f7:19:d8:55:f4:21:b7:a2:07:a7:94:be:
                    da:18:b8:04:a0:91:1b:63:6c:7a:0e:89:c4:a7:06:
                    a9:a7:70:39:2b:28:a0:4c:f6:1f:e6:a6:a4:19:21:
                    c9:18:59:54:32:40:c7:62:c5:0c:c7:d1:9c:a9:d6:
                    73:b2:8b:eb:64:18:9f:4c:dd:09:a4:f2:d9:c1:97:
                    0f:b1:a1:9d:1a:31:0b:9d:05:d5:ec:76:23:2f:ce:
                    9a:77:11:2e:f5:ba:fd:f2:f9:4a:ff:3c:ae:50:fc:
                    06:e5:7e:8c:5d:c6:de:e9:42:07:45:4c:fa:d9:80:
                    f8:04:c2:44:af:07:4e:cc:7f:f2:4f:d8:47:fc:45:
                    41:ce:ee:66:83:5b:74:16:f7:d9:fa:3e:70:e0:aa:
                    d4:0c:5e:08:c6:19:c4:78:3e:be:e2:0d:59:fe:4c:
                    90:d6:51:b7:1a:51:fa:14:b7:f1:20:ee:45:5e:12:
                    24:2a:66:2a:95:ea:81:5e:3e:4d:10:8d:44:49:85:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:38:D3:3B:A7:CC:44:F1:99:AC:17:79:80:06:56:9F:9D:A4:22:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/863d3362-b985-3a3f-9766-efde4e5f0064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:23:4b:cb:57:a5:05:a2:46:e2:06:a6:5b:88:c7:7a:b4:72:
         98:76:82:8d:66:5d:5f:04:82:9e:2b:69:5e:33:ce:3d:5c:48:
         bd:a6:3a:f2:66:63:cb:b6:07:05:f7:1b:fe:12:7b:11:d1:94:
         fa:35:50:aa:1c:eb:8e:b7:c6:67:2a:ed:d5:47:04:65:b1:48:
         6d:ed:38:39:6e:67:dc:5e:43:7b:b1:d6:19:2d:ee:d7:b7:50:
         f3:ce:73:02:8d:7c:ac:c6:d1:d3:7d:8d:33:65:80:eb:b4:4d:
         f4:c7:50:0a:7e:3e:9d:5d:27:cc:a4:15:99:1c:dd:a5:fc:67:
         d8:c1:fe:7c:18:a1:55:0f:cc:e8:04:a1:9c:89:91:25:ef:87:
         a4:b5:c0:ef:71:af:02:86:e6:ad:82:61:a8:a5:29:18:de:b5:
         28:68:b9:72:e0:45:fd:fb:f8:a7:ef:33:1d:71:e8:8a:5e:0a:
         f3:39:16:74:56:7f:58:bc:a6:1a:75:aa:3b:ea:ae:9c:61:ef:
         01:d5:53:3c:06:dd:03:8f:cb:24:1a:71:a2:07:f7:6b:a5:f1:
         69:2f:2f:71:f9:93:65:a1:30:fb:6f:ae:25:b6:bf:78:a3:a8:
         6a:4e:47:33:1c:c3:16:72:ca:60:c7:54:c2:c7:ec:1d:7c:b6:
         af:61:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:11:59 2024 by rpki-client on console-ams.rpki-client.org