Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29be1455-1db5-3bdc-8c9c-d9c1ed1d84be.roa
File:                     29be1455-1db5-3bdc-8c9c-d9c1ed1d84be.roa (raw, json)
Hash identifier:          RhdSupMl4zlIFShRsfigw3eAQj8D958DXlTbx9AgUMQ=
Subject key identifier:   83:8B:95:46:79:25:6C:9B:00:02:35:87:20:0C:2E:D6:C3:3A:9C:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848424AE65F27DDBC89D114C480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29be1455-1db5-3bdc-8c9c-d9c1ed1d84be.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20214
IP address blocks:        174.176.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e6:5f:27:dd:bc:89:d1:14:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=8b67c735-c39e-4500-9a52-31bd0ff1188e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:22:37:96:30:d0:f8:87:0d:8e:35:e0:f8:
                    af:15:75:96:cc:ef:0d:b4:4b:fa:76:64:5c:02:ad:
                    c2:ea:4c:a5:12:7d:e4:59:46:f7:5e:62:05:0a:a5:
                    08:8c:6d:42:20:e8:13:2c:5b:81:69:df:49:d6:2e:
                    06:02:42:2f:0b:3d:36:cc:bb:d2:83:c4:6b:67:0f:
                    bb:b1:04:48:97:46:9e:e9:b9:94:14:ae:04:39:c8:
                    1a:74:35:c5:b4:17:2e:5c:aa:50:9d:1f:2e:05:1f:
                    cb:03:20:32:05:75:b5:24:61:5e:92:71:af:cc:4f:
                    20:2c:c8:3b:db:8c:9c:84:8b:77:e3:e3:1e:99:34:
                    9a:4c:08:a0:9b:64:83:38:ae:b7:c8:98:04:5e:c2:
                    8a:cd:66:89:a9:cf:07:90:41:d0:26:81:a2:07:9a:
                    63:dd:61:dd:e3:14:cd:25:cf:a8:e1:67:15:ad:b0:
                    c8:3e:6b:58:63:f9:e4:fc:59:31:1a:1f:a6:c6:81:
                    7e:e1:c9:8f:5c:cc:22:2d:10:cf:16:d7:5a:ea:75:
                    05:61:82:aa:25:a3:46:a5:46:2d:64:a8:03:41:44:
                    32:d8:b0:f8:88:24:7b:f8:a4:be:70:3c:59:bb:f3:
                    8e:d0:e5:fe:25:f5:e9:ef:17:76:92:e6:96:b2:a6:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:95:46:79:25:6C:9B:00:02:35:87:20:0C:2E:D6:C3:3A:9C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29be1455-1db5-3bdc-8c9c-d9c1ed1d84be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:97:8e:25:d7:9a:bf:cf:d2:75:1d:d1:e0:e2:56:4a:5c:10:
         f2:b1:83:7d:15:63:9c:68:8b:ac:ec:72:b5:77:27:9b:b9:66:
         b4:91:d8:aa:3b:9d:9e:53:81:9d:1b:b1:ce:0a:42:c2:4b:53:
         39:54:a4:65:06:f3:a6:c9:5f:ad:e5:8f:13:bd:b0:bc:bc:dc:
         0b:a0:a5:d8:b2:23:fa:ea:5a:08:b6:19:89:9a:a2:a6:26:8f:
         ab:ed:a2:13:a3:17:4a:a3:33:1c:d8:49:d5:73:ea:e7:71:7d:
         27:35:32:0b:0f:20:1f:cf:e1:b5:08:b5:c9:28:65:ee:69:33:
         50:cd:b9:2e:9d:2b:79:d5:67:57:65:63:02:64:f7:af:f3:10:
         81:11:81:bc:42:a3:ba:5a:c5:3f:fb:0c:a9:fb:77:d2:22:46:
         35:ad:53:0b:00:6e:5d:25:d6:6a:a6:d9:71:c9:b4:1d:f7:28:
         8b:2f:43:13:29:51:9e:fb:1a:85:91:3d:f3:7d:09:0a:bd:77:
         65:03:8b:64:64:4f:8f:fe:d0:f4:f6:8a:4b:4b:d3:ac:3c:05:
         f6:50:05:ec:c4:15:f2:f4:31:d7:93:c3:50:18:9a:15:7c:fa:
         e4:db:54:63:3f:ca:d2:16:69:8f:d5:aa:62:c7:d3:38:8a:d5:
         81:02:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:03:52 2024 by rpki-client on console-fra.rpki-client.org