Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e1cc35-be7a-3b37-82ab-ccad7d996d71.roa
File:                     21e1cc35-be7a-3b37-82ab-ccad7d996d71.roa (raw, json)
Hash identifier:          fUgv8VJUtRi4EmQQBSiKN8vOM8PEGbVDGR5kapeShJs=
Subject key identifier:   3C:0A:17:55:42:AE:27:9C:7A:49:AD:DA:AB:FD:08:F1:3B:7F:94:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF937DC7F3D65DA5F6C4180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e1cc35-be7a-3b37-82ab-ccad7d996d71.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        74.92.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:37:dc:7f:3d:65:da:5f:6c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c83a2255-7de9-4f9b-b7eb-305fbe6236dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:a3:30:12:ec:c5:1a:ce:e1:fe:1f:c0:d2:
                    e4:75:86:ac:e1:e3:7e:72:96:47:2a:98:2b:ab:70:
                    18:00:0e:45:5b:b9:bd:cc:d1:42:6d:38:15:38:67:
                    dc:7a:ec:e9:42:65:0a:1b:df:7b:a2:59:51:77:7d:
                    5e:3a:a8:86:0c:bb:9d:ac:0f:d1:f1:81:82:6f:de:
                    90:c4:21:81:55:d2:b9:53:f5:cc:25:4e:25:3e:57:
                    8b:a2:b4:2e:b9:b5:85:b6:63:f0:9e:11:ad:c8:51:
                    3a:81:f8:0f:d8:c1:ba:e3:e0:df:2f:cb:ed:b0:87:
                    60:2a:b9:01:f6:65:51:39:45:0b:57:39:70:62:2d:
                    12:2c:10:57:41:30:fb:61:58:5a:51:cd:4e:3d:e3:
                    99:ab:69:4d:49:a6:19:f7:0f:0d:c5:13:82:bd:c1:
                    30:82:14:f9:53:69:4d:8e:a9:d0:fe:29:92:2b:7f:
                    23:1d:22:99:08:af:e4:c9:01:9f:dc:54:ba:bb:64:
                    80:a1:76:a4:c2:34:7b:f6:18:60:eb:d1:83:10:79:
                    84:09:b6:64:c6:89:cf:96:55:e0:22:fc:5a:25:34:
                    e6:76:74:70:c8:72:14:fc:aa:4c:f0:c9:83:ea:62:
                    7d:6b:83:d4:18:6e:17:5a:93:23:28:0a:f0:5c:1a:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:17:55:42:AE:27:9C:7A:49:AD:DA:AB:FD:08:F1:3B:7F:94:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e1cc35-be7a-3b37-82ab-ccad7d996d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.92.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:3b:5f:7b:ec:e0:cb:20:d0:e4:73:38:cf:6c:84:aa:06:
         b3:dc:22:63:aa:d6:d5:79:fa:0d:df:39:86:a1:05:55:39:c6:
         f3:d8:ec:24:a9:0d:95:36:ab:ee:01:3f:c6:c9:a6:a0:c0:eb:
         d0:01:f0:8c:eb:61:7f:dd:c4:82:58:fb:af:e7:8f:c2:cb:77:
         9b:31:1e:54:d0:bb:dc:c1:25:ba:02:88:68:d3:11:da:4b:e5:
         2d:8f:dc:0a:f5:cf:59:b7:ea:f3:2a:9c:c0:c2:f1:2e:ab:ac:
         5a:4d:c0:b0:60:ce:74:04:30:ce:82:97:d0:6b:4e:a2:5f:74:
         db:1b:06:33:a6:dd:36:ea:05:c8:0c:a9:de:d9:3f:34:55:8d:
         80:30:de:e2:06:85:90:f2:02:03:39:57:b2:a7:bc:e4:63:a0:
         05:9f:bd:4d:8f:b7:26:20:17:56:be:d1:c1:c4:6b:1c:4c:a0:
         7a:41:85:be:4e:6d:d2:ed:d9:c8:b6:e1:7f:ef:2d:31:10:ae:
         ee:56:e0:b1:7c:38:71:53:dc:6a:c8:bc:a9:9d:db:4e:c2:ec:
         a0:ea:d9:66:3c:5d:36:cc:b8:b0:96:3e:6e:b5:df:b2:f8:7f:
         fa:50:29:a6:e6:42:88:60:ca:a1:13:4b:ed:40:f0:7c:8d:5f:
         2a:7a:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:12:59 2024 by rpki-client on console-ams.rpki-client.org