Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa
File:                     c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa (raw, json)
Hash identifier:          VtHdVCb2gXlVIrD8cWT1nz+1Hn4lzL25ttyMI35VMiw=
Subject key identifier:   EB:E0:9E:18:FF:29:F0:78:9A:D7:B5:01:2A:81:FB:11:5C:B4:5D:97
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847BAC6AAA9B5EE9ECDA0936520
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     54913
IP address blocks:        78.138.17.0/24 maxlen: 24
                          103.54.59.0/24 maxlen: 24
                          104.129.128.0/24 maxlen: 24
                          104.129.129.0/24 maxlen: 24
                          104.225.142.0/24 maxlen: 24
                          104.225.143.0/24 maxlen: 24
                          213.255.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:aa:a9:b5:ee:9e:cd:a0:93:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=0b12c5ff-39cb-4745-8361-abe7e9e2a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:ad:88:d6:b3:65:9c:c0:ba:2b:ef:dd:8b:
                    e5:19:2e:e5:4c:9e:9d:fe:0a:49:bb:f3:fd:ed:a3:
                    4b:f4:32:40:29:6b:25:e1:70:50:1b:49:81:29:45:
                    d8:e1:0c:ff:57:d5:48:15:ef:20:a5:52:52:cd:b6:
                    f9:a7:67:d0:b3:33:68:19:9f:4c:4c:e8:7f:18:f9:
                    00:f4:7c:d6:d6:ff:f3:29:7c:18:26:6b:65:e2:38:
                    76:34:9d:2a:d3:9d:8b:42:87:c1:2b:5b:e0:e9:3b:
                    6e:fa:31:4b:f9:75:80:17:36:8c:bf:11:bc:54:e6:
                    59:bb:06:51:4f:6d:c0:23:c3:f1:8d:3a:1d:6e:8a:
                    27:8e:1f:84:47:d6:92:ec:14:7f:e0:56:2f:47:5f:
                    33:e1:c9:87:ba:97:70:56:8f:3e:77:bb:45:16:41:
                    73:1b:9b:c9:ca:55:94:b6:eb:05:4c:82:8e:6a:05:
                    bf:e8:79:6d:68:ce:79:fe:0e:dc:e3:9e:67:3a:a0:
                    52:bb:bc:fc:c3:2e:5b:a7:b4:c2:5f:cf:6b:6b:a0:
                    f4:af:71:e9:d9:0c:b3:18:45:2f:3e:af:f0:87:55:
                    b1:d5:a5:25:cb:e7:1d:e1:7b:2d:73:32:51:9a:3c:
                    cd:7f:58:b7:16:8d:9d:67:79:a4:6c:7a:59:dd:98:
                    33:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E0:9E:18:FF:29:F0:78:9A:D7:B5:01:2A:81:FB:11:5C:B4:5D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.138.17.0/24
                  103.54.59.0/24
                  104.129.128.0/23
                  104.225.142.0/23
                  213.255.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:60:2e:82:54:84:8e:2f:c1:07:6d:14:ef:39:9e:de:8f:ce:
         e0:1e:63:0b:8a:2f:a1:86:26:14:9d:f5:58:be:4a:fb:8f:b1:
         9b:85:2f:22:17:f3:25:63:22:50:a7:94:aa:e7:01:f9:c0:0e:
         28:d0:a2:b4:7d:59:59:cc:95:74:40:3a:8f:99:e9:dc:62:96:
         39:33:4a:e5:bd:54:16:02:33:09:7c:aa:35:55:15:08:81:e2:
         4a:75:a5:d7:64:1d:91:ac:54:05:9e:a0:a9:ff:83:09:92:7d:
         1b:ed:f3:75:68:e0:4d:81:03:4e:ed:2b:bb:1e:03:b0:a9:77:
         4c:3c:ca:28:f7:7f:94:b0:fb:d2:83:e7:8f:32:9a:aa:36:e8:
         de:4c:87:a2:02:34:ee:fc:d9:86:e1:67:af:8c:61:df:dc:1f:
         ad:81:f8:b6:f1:83:6b:b5:69:d1:3f:0a:6a:47:7d:bd:a1:1e:
         18:cd:7c:e4:27:2c:55:5b:6f:e9:49:45:01:61:de:9f:e5:65:
         00:06:56:ed:c4:c1:1f:a6:52:e7:93:c8:44:93:fc:09:45:79:
         80:50:ce:57:5f:d4:1e:fd:f9:2f:e1:d9:f9:cb:cc:e4:9d:e9:
         68:2c:50:e6:f2:72:22:73:49:63:f0:8e:cb:ad:11:b5:a5:99:
         ed:f1:5f:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org