Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46661a5d-0614-35e7-88dd-903bcfe8705c.roa
File:                     46661a5d-0614-35e7-88dd-903bcfe8705c.roa (raw, json)
Hash identifier:          7jCPMXMw2HtffNIWEVoq2d4G9tzrXNy8HBya5oh+zKQ=
Subject key identifier:   D5:CD:C2:8A:4E:94:BF:5F:4B:D8:F7:9D:3F:41:04:C7:DE:C4:05:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB01CBCF2495973404540E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46661a5d-0614-35e7-88dd-903bcfe8705c.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        174.62.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:1c:bc:f2:49:59:73:40:45:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f05b43b3-a0d6-44f3-a5a0-b23655d6eb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:c8:12:6b:2d:e8:69:4e:d7:76:10:e7:d6:
                    f7:59:f0:16:b4:60:52:61:b8:c7:fb:c3:13:65:0d:
                    75:d3:29:65:98:cd:28:b4:06:88:f3:44:3d:70:d6:
                    5a:0f:29:3c:00:49:23:2e:d7:bf:6c:e9:3f:03:81:
                    c6:96:8a:4e:9a:1b:97:0a:ee:92:8a:39:45:0b:f5:
                    d0:73:cb:83:7b:78:5b:47:2a:e1:97:04:d4:a6:47:
                    c2:61:80:17:a3:c5:15:70:ba:b5:29:2d:21:6b:17:
                    ab:e5:01:1c:8e:bf:33:6f:a6:ee:e4:1a:a2:b5:4e:
                    dd:a6:a9:f2:0a:ab:94:0d:b9:5f:97:ab:c2:80:1d:
                    26:6e:6e:91:90:3b:8b:a4:3f:5c:de:d5:4a:2c:a9:
                    ba:65:f1:bb:59:ea:2f:dc:5d:db:49:1d:30:4a:1b:
                    2c:93:9b:2e:d7:4f:fd:57:6e:72:13:46:f3:88:40:
                    a9:14:d9:02:65:b7:6a:7f:c7:9e:2f:91:cc:6d:dc:
                    1b:bb:34:bb:52:7d:c8:59:47:b8:6f:f0:dd:c1:14:
                    72:ea:96:eb:2d:cd:fd:8e:83:8e:63:5f:56:e8:ea:
                    70:70:d7:7a:41:5d:de:6b:bd:27:b9:17:9c:96:67:
                    52:3f:6b:09:29:13:4b:70:4f:81:8f:ca:0a:17:9e:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CD:C2:8A:4E:94:BF:5F:4B:D8:F7:9D:3F:41:04:C7:DE:C4:05:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46661a5d-0614-35e7-88dd-903bcfe8705c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:50:ae:02:57:fa:27:22:56:0e:2d:be:27:36:38:db:f7:3c:
         c4:a3:db:1b:48:f7:c0:2f:09:55:b3:19:05:bf:39:dd:bb:ba:
         00:34:dd:56:f0:28:69:cd:f8:73:55:bc:03:34:75:07:7b:9f:
         a6:eb:cc:bf:41:ee:bb:50:1d:66:03:b0:b8:de:05:04:5e:86:
         23:f1:1e:66:5a:e3:7e:35:a6:fa:d6:c5:f4:16:91:b9:92:34:
         af:23:52:13:54:c7:82:15:0b:e9:34:08:0a:d4:09:bb:5a:dc:
         bd:b0:67:53:7f:43:7c:ff:4b:63:00:b8:76:17:4d:7d:80:21:
         e8:02:72:88:1f:a9:ed:1a:63:1f:72:a4:b3:7d:9a:eb:e3:89:
         7e:42:29:0a:71:d7:2b:65:ed:ea:6d:ad:73:ab:62:1d:13:20:
         19:34:57:c6:f3:a1:2e:82:a0:23:71:c7:97:cb:71:32:87:69:
         d7:57:29:2e:fc:d3:ac:e5:83:39:19:df:da:ba:0b:86:4b:0d:
         22:3c:3f:5b:8c:39:42:6b:12:96:75:60:07:f2:66:0d:2d:64:
         02:03:3d:64:2f:42:26:ab:7a:c5:c4:55:82:17:ab:b6:c5:63:
         55:ad:b8:ab:51:b4:34:7a:af:3d:14:01:88:23:7b:5d:a2:d2:
         5e:57:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:16:16 2024 by rpki-client on console-ams.rpki-client.org