Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa
File:                     07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa (raw, json)
Hash identifier:          pOYGpl1PvDXB7rXYC7uZkNIsPWEFNpla/uaAeaoUwPw=
Subject key identifier:   44:6F:1D:8D:6F:60:9C:85:23:05:DC:4F:CC:6F:1A:E0:A9:86:D0:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5DB4D735B426A43DE7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        67.191.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:db:4d:73:5b:42:6a:43:de:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=14801f48-aaa3-4580-9e90-10cc946a7cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:02:c5:d1:9b:d7:63:d0:a7:e5:0c:4d:09:
                    f0:78:a0:a6:2e:10:17:9e:cf:6b:61:e2:76:b6:ec:
                    f8:0b:8d:ca:dd:97:b3:9b:9f:db:85:7c:8f:65:af:
                    09:44:b4:fa:7e:ba:0e:a0:f8:50:b3:f0:25:d2:94:
                    bf:61:31:e3:26:d8:a1:ec:3f:78:1c:aa:da:03:49:
                    a0:6d:b2:d3:9b:b6:70:3a:a6:a0:ef:13:f2:47:df:
                    cb:01:a8:40:f9:34:24:0e:83:f9:2c:b2:04:15:02:
                    40:41:ff:65:f7:4e:b2:6a:f6:0e:a4:ea:b5:10:3a:
                    47:02:30:09:ee:1a:66:ec:84:4d:54:81:95:6b:13:
                    11:01:fc:df:90:c0:5e:1e:2f:92:32:b3:05:ae:d1:
                    67:b5:95:b9:7f:75:fc:fd:06:b7:3d:f7:e4:56:fe:
                    00:02:28:87:c4:8e:cf:8c:85:61:8c:35:6b:b8:c9:
                    65:d2:d7:85:ec:64:b6:60:25:31:62:55:68:80:3d:
                    59:a8:a6:ab:84:09:29:d5:ea:63:5b:f0:01:61:1d:
                    af:ff:38:08:18:b7:dd:41:26:e9:03:65:30:f5:16:
                    10:e4:0f:ca:e8:88:60:c7:94:5a:74:f6:04:64:be:
                    f1:0f:d3:b3:73:2f:18:d3:b0:d6:2b:97:53:23:a8:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:1D:8D:6F:60:9C:85:23:05:DC:4F:CC:6F:1A:E0:A9:86:D0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:56:65:72:ae:64:13:2a:8a:d7:a2:6a:72:fd:9f:7c:2c:
         17:c8:a1:6f:bb:0e:15:81:c9:6e:60:8a:8c:8f:57:f9:1d:b1:
         46:31:e2:ad:93:9b:9d:39:b3:7d:65:e1:dc:e0:94:4d:a1:85:
         02:41:70:21:1b:5e:51:dd:b7:d8:bd:96:42:c6:64:8c:37:25:
         1c:df:db:14:cc:3c:93:aa:c6:7d:ff:2b:1f:9c:de:33:e2:3c:
         90:c9:47:b1:6e:98:71:3a:92:f9:11:d0:eb:76:de:33:63:08:
         d4:f0:c2:78:c7:2a:3d:59:c8:82:5b:69:fb:f8:9f:5c:c0:e8:
         37:26:4f:31:a6:13:47:f1:b6:22:44:23:da:6b:05:78:6b:2e:
         39:44:ef:d8:fc:2c:21:88:42:b2:81:cd:7f:86:8a:eb:b9:fe:
         cb:06:96:93:dd:93:ca:b8:d6:30:5a:c9:53:c7:5c:90:88:7d:
         4f:af:ef:03:05:28:28:89:e7:25:37:31:f8:14:18:f3:52:a7:
         b1:ff:9f:50:be:3e:53:33:3e:c1:ec:3b:ef:79:9a:ca:72:13:
         ca:7c:e9:4d:9e:c7:ed:d6:a0:98:44:c0:94:fa:03:0b:21:bf:
         5d:f2:ab:cd:57:3b:e0:11:63:e8:46:f8:5f:73:8a:2e:e6:58:
         fe:5d:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:25 2024 by rpki-client on console-ams.rpki-client.org