Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbe3fa2-e345-3112-9fc4-dfe39f54e81f.roa
File:                     3fbe3fa2-e345-3112-9fc4-dfe39f54e81f.roa (raw, json)
Hash identifier:          uj/IYUYg8eBzxfk6r1kf98i1cEeb41EuliYjh/uuDhM=
Subject key identifier:   F7:3C:6A:B9:25:35:E8:BB:AF:AF:60:A5:C4:36:8E:AE:05:D7:01:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C63BFA75296AD81CABFD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbe3fa2-e345-3112-9fc4-dfe39f54e81f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        76.105.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:3b:fa:75:29:6a:d8:1c:ab:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=227106db-ee25-4997-998a-d1470f6dca9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:66:66:aa:8a:db:c8:47:9a:d2:76:42:ad:
                    87:63:28:65:ab:c7:09:73:cb:ca:bb:54:f9:bc:6f:
                    be:05:b3:df:30:59:19:3f:3c:65:6d:e8:d4:82:62:
                    e2:13:18:ec:4f:67:00:d4:ca:a6:5d:85:fe:aa:98:
                    0c:32:a3:50:ee:31:82:a7:c4:3f:02:d9:29:81:a0:
                    94:7a:a8:a2:ea:7b:e5:c6:81:3a:66:e3:fd:0a:af:
                    a9:56:2c:c0:9a:7d:41:79:fd:a6:00:ec:06:ad:e0:
                    46:d9:6c:41:1f:0c:95:52:6e:76:3d:b1:4e:d4:76:
                    cf:14:19:a2:da:fc:fd:8d:08:f4:65:f1:d3:b9:b5:
                    dc:bd:ec:c4:c6:d6:0c:a3:4b:28:2e:eb:a6:62:fc:
                    7a:ca:ea:59:b6:43:94:70:a2:17:57:27:89:62:85:
                    bf:40:c7:ea:58:96:93:34:87:d7:a6:e8:79:46:23:
                    89:10:19:91:41:49:f3:60:7d:32:9b:3f:0d:e0:d7:
                    42:18:c7:b3:37:e9:92:cf:e3:92:53:e7:0e:f1:2f:
                    9c:c6:de:d4:31:db:dc:56:24:d9:d3:b0:24:d9:9b:
                    fb:58:5a:d8:8d:56:f4:bc:64:63:28:90:bb:22:87:
                    13:dd:c8:b1:28:6f:91:2d:53:c4:a2:39:80:e2:0f:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:6A:B9:25:35:E8:BB:AF:AF:60:A5:C4:36:8E:AE:05:D7:01:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fbe3fa2-e345-3112-9fc4-dfe39f54e81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:88:e9:65:d7:a4:d4:0d:e1:57:2f:57:72:8d:99:31:d2:99:
         29:af:46:7f:68:db:4d:4e:fe:7b:1e:83:ce:a4:4a:31:5d:94:
         63:bb:84:95:d6:b7:3c:7b:fb:b5:e2:8d:dd:f0:fb:0e:1d:9a:
         97:48:e7:17:e9:00:73:eb:60:72:e4:dc:5a:2a:56:bc:9e:96:
         82:5f:f7:22:ba:fa:6d:cf:0f:ef:d5:86:8b:e3:18:fe:c5:8a:
         34:bf:a0:91:fc:e1:f4:27:b3:35:d2:f9:c7:9f:c7:c8:c1:db:
         42:81:f3:39:b6:0a:e6:f2:0f:c1:5c:c2:cc:3b:39:3a:76:95:
         38:c3:b9:b1:d9:f0:54:e7:b4:74:f6:6c:b4:89:d0:61:d8:1d:
         52:5f:83:ca:68:69:c5:3f:6b:73:70:f3:a1:60:7b:c7:8e:81:
         8f:b0:86:fc:29:42:c3:43:bb:e8:06:ab:39:1a:de:01:12:46:
         66:b1:d6:9b:91:61:bf:c9:24:ed:f4:6e:1f:ad:81:0c:ae:85:
         e6:a0:e7:a2:8a:50:76:3f:b2:ec:d2:dc:7a:03:24:77:6c:78:
         44:93:85:7b:58:99:74:0f:03:05:c9:13:f6:ef:9a:3b:57:d2:
         ce:16:bd:5b:e7:ab:85:1f:94:00:40:4d:b1:3d:e8:04:a6:21:
         08:cc:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:23:10 2024 by rpki-client on console-fra.rpki-client.org