Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4d5e8e29-b9d1-3e0f-92aa-7bbc86cdabf4.roa
File:                     4d5e8e29-b9d1-3e0f-92aa-7bbc86cdabf4.roa (raw, json)
Hash identifier:          PQRbOjseOXYezeCyv5zN6ZtvILmGy7o2BgVlX9SYujw=
Subject key identifier:   F9:88:DE:D9:E7:13:CE:B5:0F:EE:A0:FF:41:3A:6B:41:35:FE:A3:18
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285847213B0F63B667BE6E95FEDC40
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4d5e8e29-b9d1-3e0f-92aa-7bbc86cdabf4.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     16819
IP address blocks:        64.29.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0f:63:b6:67:be:6e:95:fe:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=80cf117d-342d-4874-bc1c-dcfe7321a858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:cb:9f:c5:1a:47:da:29:0c:a8:27:c3:0b:
                    07:eb:12:af:d0:c2:5d:7f:dc:76:e2:71:24:c7:12:
                    d7:04:90:17:dc:b3:e3:3b:35:9f:b4:2c:2b:82:1b:
                    63:ce:fc:5c:70:7f:90:6a:68:21:3a:89:35:dc:be:
                    59:af:36:e8:7d:e7:8d:b4:cc:75:98:ec:49:54:7d:
                    d3:ea:06:b6:43:ea:22:80:8b:73:ce:be:9e:03:0b:
                    c6:ec:9c:b6:4e:36:02:9b:74:c7:2a:af:8f:07:ca:
                    d7:fd:6e:e5:77:e2:df:bd:1c:e7:7d:0f:fa:7b:a4:
                    c4:3d:23:f1:65:56:3b:aa:76:ee:ee:71:c8:65:d1:
                    5a:a4:a2:82:1b:01:d1:fc:77:d2:18:76:e7:8c:e7:
                    18:8f:d7:a7:4f:58:39:5e:e5:aa:47:4b:3c:bb:6a:
                    87:2b:2f:6a:2e:bf:12:12:e8:07:d2:dd:b5:fb:e8:
                    c9:c2:51:7b:04:7e:ba:a5:60:f6:75:b7:33:ec:59:
                    84:89:ab:c0:f1:a7:88:cd:cc:20:68:b5:7e:32:f4:
                    1c:1e:1f:8e:b1:7d:02:0f:ee:dd:f8:dd:a7:70:5e:
                    f7:d1:3c:0d:e9:91:51:c2:a5:41:f0:f6:90:0d:2f:
                    be:40:93:7b:d5:07:c1:70:84:d0:8f:53:ac:3b:c1:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:DE:D9:E7:13:CE:B5:0F:EE:A0:FF:41:3A:6B:41:35:FE:A3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4d5e8e29-b9d1-3e0f-92aa-7bbc86cdabf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:b8:b7:5e:ae:21:49:95:dd:f7:3d:93:79:cb:0b:67:93:
         46:c7:ae:69:b4:2c:de:56:80:61:98:fd:ae:d3:04:01:cd:29:
         b6:a6:a5:13:f8:35:5b:de:71:a1:27:72:ad:bc:67:5d:0a:6a:
         c2:1d:8e:15:8e:46:40:be:aa:cf:56:8d:cf:31:12:15:67:74:
         05:dc:fc:f9:35:69:87:32:fb:53:ec:3c:95:bb:ec:ec:8e:b9:
         fb:8e:ca:37:8a:48:be:22:ca:00:a2:da:03:04:8e:d5:16:9c:
         24:9c:95:78:c2:db:1c:5b:5e:ab:65:d5:00:12:dd:2c:f4:26:
         7b:dd:cf:98:4d:3b:b4:46:29:56:e9:5b:f4:3d:b8:6c:61:98:
         94:48:09:ff:4e:ca:a3:b2:63:43:c2:f2:4b:b7:c8:3c:21:03:
         73:b7:da:3b:d4:c5:6c:81:91:8d:8c:61:53:19:45:b0:0c:0e:
         28:bc:f2:cf:b1:76:9c:09:ad:e8:aa:35:8a:12:53:33:e4:f4:
         0f:58:dd:fa:fc:fb:9a:4b:e0:38:41:c9:29:a6:ca:86:93:b6:
         67:24:e8:5b:38:2f:ae:ab:8c:e5:bf:73:29:25:7a:55:d7:e2:
         e3:b6:84:f2:79:2e:3a:d6:30:6e:c5:ad:04:5c:fe:68:54:5b:
         96:7a:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org