Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
File:                     59544e35-0c4d-3fbc-81cb-8a530d41787f.roa (raw, json)
Hash identifier:          sId4hSJfONNs4K+0ocHqP7SGDMXTcRFA1qcJzkBC8KY=
Subject key identifier:   5F:F2:6F:4F:BD:9C:A0:BA:45:78:86:9B:FE:A3:85:12:59:15:18:61
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285847F2BA293EA9A8F619D4FCC240
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     6621
IP address blocks:        67.44.112.0/20 maxlen: 24
                          174.32.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:29:3e:a9:a8:f6:19:d4:fc:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=6f8f2196-38c0-43c5-a34b-1e3dd4e372c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:97:c5:8b:db:91:a9:d5:17:77:46:09:dd:
                    28:dc:67:db:96:2a:86:87:d3:75:22:c2:ac:a9:75:
                    5b:e9:23:d2:25:20:47:eb:89:76:d7:2d:a2:76:15:
                    ed:e5:df:6d:bc:08:5b:e8:31:8b:af:05:50:08:ce:
                    cc:c6:b5:ee:a1:79:51:16:37:6d:a9:94:6c:e2:12:
                    f2:af:b0:53:69:56:a0:86:b7:8d:49:be:c1:82:24:
                    d3:04:a5:4c:fa:02:ef:73:d3:9f:68:6c:96:61:db:
                    72:f4:fe:8c:37:e8:14:e2:7a:1a:cb:9b:58:5a:b5:
                    08:17:70:91:19:c9:ca:b2:1b:d1:74:0e:30:11:41:
                    cf:cd:35:da:94:5e:9e:30:e4:b7:27:bb:ba:d8:f6:
                    a7:16:79:f9:48:b9:96:21:81:96:ff:eb:d2:8d:a9:
                    c2:3e:d3:6a:cd:cf:4c:4c:c6:d9:4b:15:d5:36:ba:
                    c3:3a:05:9a:30:40:f8:24:c2:6a:59:47:7d:21:c9:
                    15:e6:28:eb:dd:05:92:b5:ee:5e:a4:9e:3c:0d:b4:
                    43:6f:1f:9a:05:9c:a7:57:03:79:95:75:5c:c4:47:
                    6a:59:75:56:34:2a:4e:b4:84:43:8b:f4:37:6b:ea:
                    0d:18:bd:83:50:f2:6f:b8:8b:e2:34:98:09:c9:b1:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:6F:4F:BD:9C:A0:BA:45:78:86:9B:FE:A3:85:12:59:15:18:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.112.0/20
                  174.32.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:d3:66:1a:c6:ba:11:f2:80:c1:ed:83:50:37:1d:d4:ec:
         5a:36:61:89:76:96:8b:49:20:a2:ba:b4:8b:c0:44:fb:82:9e:
         9f:1f:83:ef:43:06:f4:0c:64:5e:0e:6c:99:e2:58:2c:35:bf:
         0b:32:41:f7:84:3d:e4:4a:08:07:af:09:9a:48:5b:4a:16:aa:
         57:ba:1b:a7:26:20:b2:2f:9b:ec:c5:fc:23:c5:35:c2:fb:c1:
         1b:36:17:b2:dd:c6:fa:98:90:34:cf:2d:5e:1c:a1:ca:28:7e:
         1b:ad:39:79:54:d9:f6:58:8c:22:5e:11:25:c5:7d:8e:d6:22:
         ff:31:7e:f1:7c:f4:01:9d:4c:ca:93:15:9a:1d:5d:da:f8:23:
         90:d1:5f:bc:ce:40:a7:3c:db:7e:d2:cb:a7:07:21:5f:78:6a:
         31:b0:11:78:ed:d4:ac:b5:55:ce:ab:fe:53:79:89:14:ae:5c:
         7c:12:60:c8:28:d6:e7:fa:2e:a4:54:6d:e8:3f:97:1c:34:d5:
         42:7a:5c:f2:cd:be:98:26:be:11:98:f5:8f:7d:7d:05:6b:66:
         e1:ca:e9:7b:94:ea:0c:61:6b:19:bb:4b:16:ba:10:41:0c:4a:
         58:13:61:cf:d8:e3:e8:0d:d3:bc:06:be:e0:3b:0e:9e:74:86:
         05:42:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org