Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa
File:                     ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa (raw, json)
Hash identifier:          eZl7YB2gw1sQJ45jZNd2xM5SsW3XtbB4cNTPMK0XMXU=
Subject key identifier:   08:6A:06:7B:1B:87:38:90:F4:17:B5:72:5F:5B:91:60:F4:73:A8:70
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858474420AB3DFD0708C6BA46F340
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     40139
IP address blocks:        69.44.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:ab:3d:fd:07:08:c6:ba:46:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=61f72d8f-432d-4da8-8612-ec051eb21be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:50:69:e1:e3:9f:49:97:da:14:87:4a:d3:
                    8e:ef:d5:ec:16:f8:87:65:0d:56:a6:88:ff:8c:90:
                    39:2b:a3:e8:3e:02:54:0c:65:d6:99:c3:ee:97:ce:
                    6e:88:c4:b1:f2:74:49:f2:fc:59:5c:d5:46:14:06:
                    7d:43:eb:ec:ec:65:85:fe:98:06:13:bb:bf:40:3a:
                    ec:97:7a:9a:e8:ee:e3:12:69:3e:b5:6e:cb:6c:8a:
                    23:07:de:26:07:2a:d8:9d:c1:68:6e:ed:b2:df:34:
                    ff:c8:96:37:19:59:41:e1:f4:37:80:0e:91:f0:2b:
                    e8:8f:2d:84:56:a7:e9:7d:ac:c8:c6:32:f3:b6:89:
                    be:40:c1:d2:fa:f6:b1:00:9b:61:41:ad:ab:0a:f3:
                    64:bb:fb:34:2e:9b:70:19:b5:b8:07:45:ea:94:d6:
                    21:b7:49:09:92:c2:76:e7:df:7e:66:51:e8:bb:7f:
                    b4:60:85:d8:47:1f:30:5b:ff:f1:47:d2:65:7c:a8:
                    4e:99:a4:18:d9:f0:a7:31:12:bc:96:a7:e6:79:62:
                    96:20:49:70:38:91:31:2b:9e:bd:96:ac:74:6c:b4:
                    b4:04:00:3f:0b:2f:7a:ee:c4:7d:a0:e9:7d:7b:9d:
                    2d:b2:79:3e:3f:3b:3a:cf:d3:1e:b1:d1:13:09:5d:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:06:7B:1B:87:38:90:F4:17:B5:72:5F:5B:91:60:F4:73:A8:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.44.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:90:b3:9c:51:8f:50:36:74:e8:b7:d0:e6:f2:75:19:96:6d:
         4c:33:7d:11:cf:d5:35:70:02:64:26:52:35:88:ca:7f:12:b3:
         6b:73:6a:26:9e:a5:8f:f3:5a:61:e4:3b:d0:52:8c:1d:92:92:
         04:65:7f:fd:74:58:da:31:db:12:78:35:45:a8:d2:ef:46:50:
         be:50:9c:82:98:0b:d0:51:8b:67:49:18:e5:fe:96:b9:04:21:
         de:b1:91:02:7c:f7:84:25:d7:8a:13:5e:a3:bf:a4:60:a4:97:
         0b:65:cc:e5:75:4a:1c:91:2f:ef:7d:3f:dd:d3:cd:b3:b3:b9:
         0d:84:61:8c:55:9c:e6:91:41:89:53:b8:32:ec:ba:20:ec:63:
         b7:88:d2:72:f7:e8:13:5c:33:5a:6a:7f:af:68:a5:eb:f9:fa:
         b8:cf:12:99:93:33:be:47:dd:f1:ff:2b:bf:fe:b3:50:81:0e:
         f4:85:0d:88:cd:54:aa:e1:d7:72:fe:e4:df:02:11:fb:27:ef:
         80:33:7f:21:be:2e:e9:4e:d9:10:d0:72:61:b7:32:36:c4:20:
         97:35:84:1c:71:9a:a5:8a:a7:b4:be:15:ae:15:43:2d:8f:ca:
         5a:a3:12:22:8f:ba:70:51:88:33:1d:8b:83:8f:62:b0:6a:d7:
         ac:80:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org