Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
File:                     e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa (raw, json)
Hash identifier:          kQAN22QptEJ/Y0LLBern6zWP/Xc/O8kKC2ukCaGj/bE=
Subject key identifier:   11:30:18:ED:E4:7E:77:65:5F:3D:B8:CC:B2:93:0E:3F:2F:07:30:02
Certificate issuer:       /CN=2605899c-3814-40b2-905e-c31be23847a7
Certificate serial:       010D0C9F432858479D76B74EA295F622ECA59C80
Authority key identifier: 52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     4385
IP address blocks:        129.21.0.0/16 maxlen: 16
                          192.77.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b7:4e:a2:95:f6:22:ec:a5:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2605899c-3814-40b2-905e-c31be23847a7
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=4f9278d6-adae-4e04-93e7-9d93ea45815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:3f:a4:10:d3:33:ce:1c:e7:72:81:f9:e1:
                    9a:35:7e:fd:d2:f9:ac:1b:3d:0a:04:18:79:16:86:
                    9a:b2:82:14:91:b3:df:3b:37:22:b6:c7:93:74:49:
                    aa:81:28:99:f4:5a:53:35:3a:e8:ec:16:cd:41:4c:
                    69:15:7f:3a:66:e2:b2:b3:db:a7:91:03:60:88:28:
                    88:e8:e8:7f:d2:32:a4:0c:8b:09:f6:d6:3b:a4:1a:
                    db:a1:a5:37:33:af:a7:15:27:55:ac:c5:8c:6e:ae:
                    e1:fa:a9:02:13:58:da:cc:2a:39:81:54:fb:eb:26:
                    78:96:11:6b:5d:7e:59:dd:6c:fc:a4:6a:01:41:77:
                    e5:fc:a3:6a:14:99:ff:bd:31:28:4c:fc:3a:69:e8:
                    16:f1:a9:67:b4:8f:62:6b:16:7e:65:d7:58:b3:df:
                    2e:f1:d4:be:15:b1:68:f7:a5:06:2e:72:5e:7f:3b:
                    66:34:cd:e0:17:c4:79:14:60:0f:c1:56:9c:97:c7:
                    63:87:34:14:a3:46:ef:ef:dd:d9:34:5f:fb:38:ba:
                    bb:03:80:c8:c7:02:f0:a2:4f:0d:ee:e7:62:ad:23:
                    53:52:59:e8:e6:55:3d:83:05:b5:49:1c:89:8a:c1:
                    68:6e:ab:85:e2:fc:a7:84:77:fe:cc:7d:d9:02:93:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:18:ED:E4:7E:77:65:5F:3D:B8:CC:B2:93:0E:3F:2F:07:30:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl

            X509v3 Authority Key Identifier:
                keyid:52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.21.0.0/16
                  192.77.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5a:8b:92:d7:2b:14:ec:b4:23:53:b4:cb:12:db:86:25:07:
         48:61:da:42:50:38:50:59:41:9e:b0:6e:9f:1f:68:5f:9b:cc:
         10:95:58:57:87:54:0e:3e:6a:0b:8c:fe:37:04:21:10:78:e0:
         7d:ec:fc:ee:8e:b1:e9:91:ca:b1:50:8c:e8:c2:aa:92:dd:9f:
         28:0e:f5:a9:65:05:bf:9d:c4:6c:9c:57:ff:9d:fd:14:68:f1:
         6e:90:7d:5a:0a:10:62:af:dc:67:b2:9d:bd:69:e4:4c:74:39:
         cd:18:d1:e4:b6:e4:9d:6f:e9:4c:e9:7c:dd:30:1e:fc:12:64:
         91:36:9d:96:65:54:09:82:94:33:76:82:e5:3f:ea:c2:aa:4d:
         19:12:b0:3c:86:4a:d3:a3:e4:d1:1f:f5:9f:a2:47:16:e2:30:
         ba:cf:68:37:9d:38:87:0d:d2:21:e8:e4:d1:53:f6:99:0f:66:
         1e:1f:6a:47:bd:ca:bb:d5:5d:1d:b7:e4:8a:ab:16:a4:fc:76:
         c2:e4:23:5c:04:bb:eb:a4:b6:4b:97:38:08:d2:e5:bb:20:f7:
         94:80:60:63:75:08:d1:48:1b:ae:bf:a7:2b:6b:0e:62:dd:06:
         3e:d8:0d:30:5f:e5:5f:9f:f5:93:70:92:b9:47:45:67:b6:c8:
         bf:0e:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:31 2024 by rpki-client on console-fra.rpki-client.org