Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3518a9ad-c9aa-38fb-95ad-734942fea630.roa
File:                     3518a9ad-c9aa-38fb-95ad-734942fea630.roa (raw, json)
Hash identifier:          O51eVoHrEVitU/sFSFC5os1rK6XZliGHWuRKBfReG0U=
Subject key identifier:   C9:3C:F2:2D:D3:84:DA:36:DA:52:EF:CD:D1:42:BD:4E:2A:E5:46:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6DB863B807A03485ED640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3518a9ad-c9aa-38fb-95ad-734942fea630.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        67.187.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:db:86:3b:80:7a:03:48:5e:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f11814cb-4d6c-43f9-acb2-a404c8509374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:20:b3:54:da:55:df:06:a4:2a:ae:1d:93:
                    64:13:29:4d:c8:76:64:f6:57:01:71:d9:8f:d5:47:
                    57:6e:46:f4:a6:44:cc:e5:57:2b:61:43:d7:d6:5a:
                    fe:ab:f1:6b:ce:14:21:96:a6:f4:87:eb:41:c3:89:
                    a6:32:2b:33:41:37:e1:25:e5:1a:e9:c8:d5:2d:c0:
                    54:03:57:31:4b:99:fc:17:46:ac:ec:fc:df:dd:9a:
                    39:93:c9:94:d6:13:5e:d2:07:97:4d:fe:1d:09:26:
                    fc:fe:b0:5c:a4:0f:09:c4:9a:36:8a:28:21:bf:e9:
                    11:27:e4:3c:48:3c:ba:a8:0d:77:27:f0:63:28:e3:
                    cd:89:bb:67:3b:fe:69:25:39:ec:03:47:85:8f:1c:
                    91:cc:8f:1c:6e:35:ed:fb:6f:d6:59:75:e5:60:ec:
                    8f:e0:1c:31:f3:72:42:33:bf:c7:2d:a4:a7:9b:dc:
                    fc:e8:4e:65:5b:22:32:3b:c7:14:9a:2c:c8:ed:5d:
                    2f:58:52:a9:c2:13:ed:a3:5b:c2:a1:73:ab:eb:8c:
                    3a:1d:94:8b:c5:0f:8a:75:b4:5a:01:01:c2:ee:21:
                    0f:eb:88:f6:5d:da:58:03:0c:d2:71:4e:d1:3a:72:
                    21:e2:99:7d:01:1b:9b:27:8f:f7:b0:b7:63:22:83:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:F2:2D:D3:84:DA:36:DA:52:EF:CD:D1:42:BD:4E:2A:E5:46:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3518a9ad-c9aa-38fb-95ad-734942fea630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.187.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:c7:fa:74:9a:35:d2:0b:ca:6e:99:64:3f:6a:8c:5c:5d:
         8c:9e:28:09:18:89:b3:96:2f:00:a4:73:4c:0a:60:f8:9e:c6:
         42:eb:73:f3:d2:91:07:c3:ad:67:50:0f:9e:26:d8:26:e2:18:
         dd:77:92:8e:e2:c8:36:64:f8:c3:c6:e3:97:77:43:bf:ed:a9:
         87:66:92:eb:de:2f:11:ba:05:96:d1:46:a4:5e:d7:b7:66:c7:
         67:0b:4c:96:b8:af:e7:01:6d:88:34:94:a9:ac:85:fd:92:00:
         b0:7f:d0:10:27:fb:46:4e:f4:46:39:0f:54:14:02:26:d3:e0:
         01:01:5d:18:d4:88:e1:c4:67:37:4f:d4:25:5f:2c:dc:3d:ef:
         97:17:d8:3e:a8:79:3c:38:cb:6e:54:32:1b:fb:17:91:9c:4f:
         04:25:19:dd:bd:d7:b6:66:a1:6a:e9:2b:d2:76:1c:67:4d:90:
         d0:8c:4f:4c:c8:c4:cf:6e:32:77:36:4e:b4:9d:7a:ff:7f:7b:
         56:78:29:ad:c1:09:65:b9:24:3d:54:71:93:94:ba:d2:f5:c1:
         05:13:18:86:08:45:c7:37:00:7f:c9:08:94:60:2e:90:fc:3a:
         a6:2c:a1:bb:6e:b2:c6:c7:f2:ea:cf:89:ee:98:f5:e0:7b:4a:
         62:0c:14:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:05:51 2024 by rpki-client on console-fra.rpki-client.org