Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
File:                     70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json)
Hash identifier:          ELMr8eiEMMgT5hc86xKL9MESwCO3hRygmGfPhQdZrus=
Subject key identifier:   FB:B0:6D:56:FE:53:D3:24:C0:1F:89:3D:0F:A4:4F:51:53:04:64:93
Certificate issuer:       /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial:       010D0C9F432858473095F17917B25AC2AED04080
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     397701
IP address blocks:        192.64.12.0/24 maxlen: 24
                          199.193.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f1:79:17:b2:5a:c2:ae:d0:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=3efe9550-c332-41cf-bd7d-aaa23e19ad62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:e0:77:c8:5a:3b:c5:2b:a0:25:c4:ce:7b:
                    45:65:0f:e6:fc:49:b6:61:56:ec:1f:07:78:b5:33:
                    bc:4f:7a:a2:34:6f:35:82:09:a1:29:e9:2e:4b:3b:
                    8a:e4:f0:0f:a7:bf:3f:31:65:70:d3:b9:e7:dd:8a:
                    7f:80:83:16:41:54:04:da:12:91:93:b1:df:11:13:
                    d0:f5:0f:4e:bb:50:a5:e8:36:64:a2:51:c6:c8:50:
                    d0:c8:05:b2:4f:87:c0:06:7b:4b:47:b5:10:71:c6:
                    7e:28:e2:68:a9:3c:8e:6d:49:19:76:7b:d7:c3:6f:
                    51:40:22:10:a1:97:66:b5:6d:66:c5:df:c7:5b:1e:
                    c9:44:14:3a:3f:09:e9:f3:2b:92:9c:2d:5c:cd:06:
                    04:2f:a9:6c:73:05:b5:15:a6:77:32:18:ee:82:f4:
                    bb:5d:cc:76:d8:ef:96:ca:5b:34:40:7e:0c:5b:9d:
                    23:45:d3:52:39:b9:fc:01:3c:25:1c:12:eb:86:73:
                    2f:cf:28:8b:cc:7e:28:72:c0:87:7a:f3:7d:10:d5:
                    3e:fb:a1:37:4b:a8:62:f9:26:e5:8f:c4:16:43:c3:
                    eb:1e:fe:7d:f2:8c:d4:b8:1d:68:00:19:7a:58:04:
                    ee:7e:3d:a2:de:8b:a1:40:25:97:59:23:cd:60:1c:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B0:6D:56:FE:53:D3:24:C0:1F:89:3D:0F:A4:4F:51:53:04:64:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl

            X509v3 Authority Key Identifier:
                keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.12.0/24
                  199.193.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:c0:0b:42:93:23:41:9d:0d:07:be:8b:34:1a:ed:3f:9e:
         f0:9a:ef:cb:88:bf:31:b2:91:81:af:b3:6a:26:2d:6b:24:bc:
         88:d5:b4:96:4f:a1:48:1f:d7:e1:f5:4c:73:4b:4d:b2:36:27:
         8d:4f:8a:a3:ee:6e:cd:58:38:36:15:dc:52:d7:cd:b8:23:e0:
         98:af:95:7b:33:fa:a5:d3:d5:1c:c2:ee:04:2e:19:37:a2:93:
         b1:17:f7:bb:bb:9d:ba:00:04:8a:ed:ab:19:2b:31:47:17:da:
         35:f3:13:79:a2:1f:1c:f1:ed:e2:a5:5d:2e:cf:fc:6d:dc:1c:
         14:25:59:aa:7b:70:49:93:e4:6a:ad:23:44:9b:a2:02:6d:33:
         b1:43:9c:8f:fd:23:aa:d8:10:b8:1d:7a:a9:44:e2:fe:30:94:
         8e:0b:4f:45:f7:6d:d4:a8:48:7b:17:6b:1e:68:4b:c4:6f:f1:
         86:fb:82:50:a6:81:da:33:22:5a:1d:33:02:0c:5b:a5:33:80:
         e7:33:21:d8:03:32:48:ab:cb:73:ec:bd:3f:79:a8:b8:69:98:
         65:7d:b6:e3:04:b6:e0:77:04:6d:dc:92:89:d3:89:84:7d:cd:
         e2:7a:e7:44:67:8c:fd:72:aa:d9:a0:f0:2d:85:62:f7:59:5a:
         bc:8b:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:24:21 2024 by rpki-client on console-ams.rpki-client.org