Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11089de4-d59a-3f2d-b5bd-22ed215ec301.roa
File:                     11089de4-d59a-3f2d-b5bd-22ed215ec301.roa (raw, json)
Hash identifier:          34eFNmGUDy8Hx7M1DFt0J0bpU7B0XByhsCOKS5BCo40=
Subject key identifier:   21:BA:0C:FE:A2:D8:7F:94:ED:CC:6F:99:6B:F5:71:F9:54:9C:73:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF71FC14ED8E2810AF93F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11089de4-d59a-3f2d-b5bd-22ed215ec301.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        71.236.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:1f:c1:4e:d8:e2:81:0a:f9:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=32df3c14-96cc-48ff-b628-191f9bbf1c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:dd:e1:7d:38:e4:43:cf:0a:1c:85:d6:9c:
                    cd:e4:fd:06:95:e0:f7:9d:c5:79:92:99:5a:26:db:
                    ca:1d:79:af:e7:94:26:59:01:26:3b:bc:36:21:d3:
                    d5:9d:db:1b:59:d8:56:35:21:25:84:c3:e8:3f:29:
                    24:f9:af:f2:00:1f:29:44:33:76:c0:9b:96:e4:b8:
                    c6:24:76:b3:74:6d:28:3b:ad:6b:97:5d:0f:05:e7:
                    30:15:05:1a:54:ef:58:2f:6f:e2:aa:b3:4e:54:52:
                    b5:6a:a1:77:ad:dc:b6:93:d6:74:af:05:e6:11:45:
                    5c:95:9a:08:c8:d3:9e:fd:f3:66:64:97:c7:ba:a6:
                    c9:8b:bf:1e:22:c4:d5:51:53:64:cb:56:e2:11:49:
                    78:67:d4:3e:13:c7:5a:b0:09:c5:de:a8:a2:ff:06:
                    88:37:d6:db:d2:93:1c:bc:dd:65:f3:5c:ca:42:2d:
                    65:04:f2:43:b7:28:5d:a9:ce:08:f7:c2:1c:7e:0f:
                    11:7f:9a:3a:27:1c:84:3c:9e:b6:27:79:c1:e5:cc:
                    8e:5c:02:07:a6:7e:94:d1:84:56:00:9f:ad:8b:48:
                    78:fb:14:91:07:3a:79:99:f0:d6:49:c2:cd:53:66:
                    2e:00:6e:2e:72:e7:67:cc:29:61:1f:8d:15:e2:00:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:0C:FE:A2:D8:7F:94:ED:CC:6F:99:6B:F5:71:F9:54:9C:73:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11089de4-d59a-3f2d-b5bd-22ed215ec301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.236.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:5e:de:b6:6a:f5:70:85:82:02:c9:ab:45:56:6c:04:59:
         31:c1:2f:03:db:65:0d:2d:0f:95:82:79:a4:5b:99:d0:8b:b2:
         3d:68:5e:9e:24:37:62:db:5e:fa:1e:f2:75:6f:70:dd:65:ad:
         7b:55:f2:a4:01:39:f1:18:1d:f4:53:a2:6a:49:e5:2f:4b:f2:
         a8:67:76:78:c9:b2:d3:06:47:20:77:8d:37:9c:14:ff:e7:ab:
         80:e6:3e:e4:71:ea:2b:07:d6:9b:51:9b:2b:72:25:64:b2:a7:
         91:a9:73:5b:d4:de:0e:b8:48:e2:10:7c:93:18:7c:fb:05:a4:
         7e:7c:54:2e:33:ea:4d:b8:05:06:a5:20:8e:2b:97:1a:32:42:
         8a:2b:c6:25:db:fd:6d:97:f9:41:43:d6:c1:9e:e9:4e:88:95:
         9d:19:2c:75:8a:7b:d2:8f:fe:c2:f6:4a:ec:3d:7b:dd:cd:45:
         f4:d9:ff:f0:c9:5d:0a:42:72:54:39:6c:0d:8a:b3:ad:3d:68:
         5a:ee:e6:a1:b8:6a:7a:88:bb:be:72:55:44:9a:68:55:fa:2c:
         9e:11:98:48:f0:de:d0:9a:86:bf:7d:14:0a:ed:1d:a7:d0:bc:
         47:82:5a:05:9b:b2:f8:9f:14:d0:54:cf:a1:77:30:10:8f:51:
         7a:74:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:55:41 2024 by rpki-client on console-ams.rpki-client.org