Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476f2809-7345-31f0-9f78-8ab07e061c28.roa
File:                     476f2809-7345-31f0-9f78-8ab07e061c28.roa (raw, json)
Hash identifier:          8ydbmL++oDQ092F9/9Y8np7gv0Bw1+HSTt14aaShgJQ=
Subject key identifier:   75:C1:92:A8:6F:33:D0:DC:FC:FE:7C:07:CA:A5:BE:B1:18:31:A1:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF751A27F0E6BC387517180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476f2809-7345-31f0-9f78-8ab07e061c28.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33489
IP address blocks:        173.12.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:51:a2:7f:0e:6b:c3:87:51:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=244a5064-0163-4e99-bdd9-a082065a3f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:b8:f4:13:d1:24:aa:ad:19:fd:38:c0:5c:
                    9d:72:c1:07:d1:be:63:5c:db:18:a4:5a:55:b9:8f:
                    cb:d3:e1:39:af:32:2f:bf:ac:e1:b4:6e:a3:44:f5:
                    7f:d6:20:16:53:61:e2:83:4d:9c:3b:51:40:5b:6f:
                    f8:2a:30:32:41:dc:58:d5:eb:17:43:43:36:5b:fe:
                    06:e8:a5:48:fa:34:67:c4:f3:88:58:a5:09:c2:53:
                    26:79:be:05:b6:5f:37:42:38:19:37:bc:8f:de:9d:
                    57:8a:ac:40:a0:1d:d9:ac:2e:34:49:38:03:b0:4e:
                    0f:3d:3d:c6:1a:ad:b1:56:2d:2f:fe:1a:03:8c:48:
                    a4:91:0d:9c:cc:14:f0:5e:8d:ce:27:b4:c7:a1:50:
                    d1:1e:d5:e2:e1:70:e9:fd:54:d4:83:50:54:86:de:
                    64:91:4d:c3:6b:11:8a:1f:70:a3:27:be:11:74:fe:
                    1d:f6:d5:bb:d3:44:87:aa:91:ea:28:54:33:f0:31:
                    42:5a:a6:d6:f1:e8:32:26:25:49:48:0d:58:1b:4a:
                    03:e3:87:38:a8:2d:0d:32:7b:c8:e0:7d:cc:9f:50:
                    fe:cc:f7:3b:34:e2:77:cf:3e:56:84:59:7a:eb:2b:
                    63:e5:88:04:07:ca:2f:d1:27:12:0c:11:d0:44:2c:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:92:A8:6F:33:D0:DC:FC:FE:7C:07:CA:A5:BE:B1:18:31:A1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476f2809-7345-31f0-9f78-8ab07e061c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.12.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:55:b1:3d:a1:78:92:32:e8:19:f7:89:56:cb:72:40:da:53:
         db:c2:80:a0:6e:42:aa:6d:83:0c:2a:21:77:be:cd:f3:18:ec:
         23:a1:b1:30:c4:c1:af:2a:79:52:bd:2b:0e:7a:16:fa:38:49:
         73:a3:71:fb:06:25:e8:00:a5:99:1d:59:cf:4e:b7:50:a3:59:
         df:c9:17:ce:cf:ce:33:81:e8:cd:c1:66:0c:e2:31:20:7e:63:
         2a:c9:df:5e:af:74:a8:d9:ad:15:2b:0d:58:12:7f:1e:92:6c:
         b1:2f:86:56:fb:6f:98:ea:e9:68:29:e9:5e:ed:c7:b7:62:8a:
         bd:24:5c:98:57:5c:96:3c:e4:41:5a:8f:ab:97:24:59:47:04:
         67:a6:d5:97:15:7c:d9:a0:d8:49:1d:03:e1:00:85:67:fb:d9:
         62:d0:c7:b7:65:74:81:6f:37:17:bb:ee:d7:6a:78:52:00:64:
         25:48:2f:64:b2:84:d5:80:cd:0a:35:e5:91:90:27:fb:c3:84:
         6f:92:55:9c:aa:2e:28:a5:7d:05:85:d2:fb:f6:53:12:54:53:
         36:9e:0c:8b:0f:58:af:33:f7:cb:e2:81:ea:2f:fa:00:3d:be:
         d4:22:53:e3:24:45:9d:19:04:49:2c:02:5d:4e:e9:4b:d3:55:
         32:7f:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:09:01 2024 by rpki-client on console-fra.rpki-client.org