Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a96cc6-15b3-363c-b00f-88bea7aff871.roa
File:                     03a96cc6-15b3-363c-b00f-88bea7aff871.roa (raw, json)
Hash identifier:          nI4A4txxKK08vBbcf1NSRLjm5rtJt5Qhy2kBFHuDe6A=
Subject key identifier:   B8:6A:6F:00:4B:BB:6C:13:4A:4B:95:9A:7F:00:E7:15:7E:3E:48:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117026ABD143BE0378296F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a96cc6-15b3-363c-b00f-88bea7aff871.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        75.65.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:26:ab:d1:43:be:03:78:29:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=52fa7179-ddb6-4568-ab08-f968657bb69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:cf:54:8f:a4:30:c5:52:51:00:81:b2:c4:
                    45:54:0e:af:4d:98:a6:25:66:d3:cb:a6:8c:02:91:
                    03:35:9d:5b:5d:cf:26:74:07:d3:de:64:d0:9c:e3:
                    ec:79:67:c8:ee:8c:f1:a3:d7:86:cb:e1:c9:26:03:
                    66:fa:36:97:68:3f:69:5d:4b:2e:f1:e9:4f:88:2b:
                    69:8b:a9:39:17:a9:12:65:0d:9a:7a:05:e2:6b:78:
                    f8:60:1f:16:de:5a:4d:62:ac:f5:7d:e4:5d:c3:61:
                    1d:45:ce:2d:1e:10:65:d7:76:8d:fe:0e:e4:f9:f0:
                    a2:ec:d8:11:4d:38:6e:dd:71:15:8f:a4:a2:45:96:
                    08:75:97:3e:b3:14:9e:33:dc:0f:ad:4c:e9:aa:70:
                    a3:a6:b5:60:28:ce:8a:9c:54:a7:fa:d7:14:b1:6a:
                    9c:7d:52:89:39:e9:fa:10:c2:2f:3b:ba:fb:14:85:
                    bd:21:3a:99:33:5b:a6:10:b4:e8:35:6b:74:1f:a7:
                    ab:57:47:3a:29:89:e6:c7:fa:6d:5f:13:8d:fc:77:
                    6f:c4:93:52:94:7b:e5:61:f7:e9:fd:91:3c:13:18:
                    9c:2c:fd:9b:0b:cf:40:de:c2:a9:32:58:21:cb:ee:
                    c0:05:dd:20:af:34:b3:41:6d:9a:af:37:bb:c3:1b:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6A:6F:00:4B:BB:6C:13:4A:4B:95:9A:7F:00:E7:15:7E:3E:48:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a96cc6-15b3-363c-b00f-88bea7aff871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:a1:70:65:e7:c5:3c:96:1c:95:8d:e7:dd:a4:62:d2:c6:
         6d:67:11:3e:94:38:13:58:79:8b:fb:35:2e:c7:81:db:ac:ca:
         da:9e:0d:fc:a6:9c:a9:17:bb:19:c7:bb:3d:2e:2f:a3:51:71:
         97:f1:07:5f:97:ca:39:4f:23:97:23:1e:96:ee:82:d0:03:8b:
         98:15:1b:40:f0:2e:74:df:91:8c:b6:65:7a:8d:cd:3e:aa:5b:
         ee:31:24:00:63:1b:f7:01:8a:e1:05:2b:96:ee:61:4e:cb:72:
         8c:f3:be:4f:0a:c1:3a:2d:25:ff:aa:c0:1f:12:9d:35:f8:6c:
         88:e3:d0:65:3b:9f:51:0b:ce:2b:6f:8d:21:ab:71:8e:a7:26:
         d9:00:fd:02:88:55:10:9a:77:8c:47:9d:4e:14:38:e5:b3:d3:
         43:c3:76:83:a0:26:ae:5b:42:80:37:3c:5d:11:55:c0:ec:d7:
         53:57:aa:68:aa:8e:29:bc:df:99:19:3f:10:0b:7d:12:3c:1c:
         50:86:90:78:7f:9b:06:97:39:bd:6f:13:4e:c5:75:58:04:be:
         ec:b6:ef:a1:c2:dc:e1:f0:a7:c7:71:d0:f8:a3:3b:c5:d7:80:
         de:68:f4:48:2b:1c:6a:6c:fe:14:75:23:da:c9:3c:2b:6f:df:
         c3:85:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:33:13 2024 by rpki-client on console-fra.rpki-client.org