Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16193a71-8657-39bd-8a3b-618aaea38ff1.roa
File:                     16193a71-8657-39bd-8a3b-618aaea38ff1.roa (raw, json)
Hash identifier:          JLb3SRchtNYKYjN8gZ2L8rByNqcQ+GznidWMskmUkN4=
Subject key identifier:   FE:8A:C3:AE:0F:92:F4:05:C3:EB:01:35:DD:50:CE:46:5E:52:A2:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C66E6F159BD705FF5C0A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16193a71-8657-39bd-8a3b-618aaea38ff1.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.91.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:6e:6f:15:9b:d7:05:ff:5c:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f8ce0eef-ea9f-4b44-8fb8-6f0f94f0ab8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:39:18:e2:fa:ed:93:f5:b7:55:64:35:2d:
                    07:28:50:25:b8:e4:dd:f3:54:38:b8:df:0a:9e:59:
                    a7:c7:db:f9:32:5c:a4:e4:07:a9:2c:bd:e4:d3:c5:
                    5c:a3:20:3b:62:dc:7f:d0:41:07:f3:98:a7:a4:66:
                    55:c9:3f:78:ba:47:e2:cb:9f:21:d2:f9:12:4b:1e:
                    01:93:03:63:4a:8b:51:63:92:e6:c5:cb:0a:95:da:
                    2d:06:a8:b5:52:99:44:11:25:9a:1b:19:32:24:44:
                    a1:e7:78:30:82:04:1e:06:af:ad:72:9f:08:95:77:
                    fa:a3:c1:9d:90:d2:98:26:13:1c:09:e7:c9:4a:86:
                    66:59:06:90:d3:24:59:bb:ff:b1:52:15:35:4a:22:
                    29:a3:31:09:62:3a:a0:3b:d6:82:32:80:e7:e3:83:
                    fe:41:8f:3e:26:19:bb:0d:04:d7:a8:81:ae:a4:a9:
                    32:a8:e1:32:0a:dd:a3:9f:89:43:64:f1:6d:c0:68:
                    ab:2a:fe:c1:a2:af:d6:92:9a:5f:b0:40:7d:3b:91:
                    1a:28:bd:ca:10:ae:95:db:83:fb:d8:c1:c0:01:31:
                    ce:24:44:f7:14:e5:29:63:ca:33:72:3a:25:65:49:
                    e9:ed:41:67:5e:29:1d:5a:2f:49:57:6c:70:91:aa:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8A:C3:AE:0F:92:F4:05:C3:EB:01:35:DD:50:CE:46:5E:52:A2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16193a71-8657-39bd-8a3b-618aaea38ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:6d:5c:0f:b9:ce:8d:a4:e6:e4:35:a9:a1:04:5c:a8:ff:
         90:35:1d:0b:d9:6f:b3:78:8f:66:d1:58:66:e4:a7:7e:87:27:
         ea:d2:57:5c:13:a9:2e:30:6f:59:d0:47:4d:15:de:19:0a:3e:
         0c:aa:8b:74:68:11:0f:8c:a9:ad:30:5c:76:02:07:e5:36:d7:
         2d:02:a6:65:b2:c7:7b:e5:33:55:f8:db:0a:ad:c6:64:df:ad:
         df:a6:ee:f0:23:46:13:3c:01:b6:ff:09:7e:11:2f:64:17:0a:
         ed:f4:b6:9b:ab:0f:46:c9:80:6a:ce:bf:e7:80:4e:f3:57:d8:
         bf:52:36:68:81:9a:ed:3f:1b:eb:05:5f:b4:78:7a:56:7b:96:
         c2:d4:2b:b4:dc:51:e0:1f:59:c5:27:56:66:9e:af:c8:d0:9f:
         f7:1e:4d:b7:3a:44:1f:b1:d5:99:2e:5b:be:ce:c9:fe:72:bf:
         5b:78:11:1e:0d:0b:5a:ce:20:9e:68:87:64:32:63:de:7d:d4:
         6b:e3:40:2e:3e:2a:0d:25:c6:2a:10:a4:5b:9d:f3:61:7a:1b:
         81:2c:2e:56:09:6a:36:d5:9c:f6:be:ee:f0:70:fe:dc:e4:ac:
         37:5f:b3:d7:79:d0:f4:09:f2:5c:e2:ab:41:fe:6f:1d:b6:61:
         fc:13:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:53:53 2024 by rpki-client on console-fra.rpki-client.org