Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485385be-530d-3677-b89b-be00ab618049.roa
File:                     485385be-530d-3677-b89b-be00ab618049.roa (raw, json)
Hash identifier:          Ha74lY7O+AYFbTjepU+JHWjbIP+aP9JCIPaAI47wSLY=
Subject key identifier:   33:80:D8:67:BC:C7:19:33:2B:29:C3:95:07:AC:43:1D:1D:DC:EA:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E79A1E08E2408EFE87F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485385be-530d-3677-b89b-be00ab618049.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        69.248.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:79:a1:e0:8e:24:08:ef:e8:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=abafa161-013b-410e-bc1b-2941355fb35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:ad:63:67:cd:be:cc:75:2b:ed:bf:92:15:
                    de:b6:88:ab:72:d4:79:0f:59:e9:52:38:c7:be:3f:
                    5d:8f:72:67:75:22:19:e3:72:21:a6:0d:df:69:91:
                    0e:39:1c:a3:4b:40:4a:84:75:23:b4:b5:a4:89:3c:
                    aa:80:2f:52:89:b2:31:c9:ec:78:4a:24:57:12:43:
                    2e:9d:5d:18:11:79:80:ca:4e:66:47:2f:65:a1:1c:
                    b7:2a:87:45:14:38:96:45:9b:05:bc:80:75:b2:94:
                    2e:1f:03:22:ed:bc:db:ce:50:6d:ee:6f:ec:a0:0d:
                    75:ee:c7:97:28:db:e8:10:3f:09:84:32:1b:5c:86:
                    7e:d1:92:fb:dc:86:79:1a:c1:5f:56:c2:b1:1d:f4:
                    cf:42:f3:42:f8:22:6f:bb:85:b0:d7:d4:2d:7e:c8:
                    06:22:c1:e8:a5:5d:cf:69:d2:66:01:c7:4e:9f:1c:
                    a6:c2:76:25:43:fc:d5:d6:f4:04:23:06:89:fa:51:
                    9d:65:cf:01:a0:42:9c:21:ef:0e:23:cd:b9:45:ac:
                    68:45:f9:86:8b:be:5f:27:f7:8d:17:47:ab:48:a3:
                    eb:a8:4a:65:c9:aa:e9:0b:ed:8b:a2:7a:de:0f:e5:
                    9a:6e:61:b9:b3:a3:8a:82:50:ba:81:e7:cb:4e:af:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:80:D8:67:BC:C7:19:33:2B:29:C3:95:07:AC:43:1D:1D:DC:EA:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485385be-530d-3677-b89b-be00ab618049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:49:e6:9b:81:c9:1f:79:69:6e:51:6b:9f:0c:9c:0a:25:
         85:e2:f3:e0:6c:86:b7:78:ad:a1:76:83:72:6a:60:0e:c1:a6:
         ce:0a:ab:28:9f:12:77:06:c7:3e:d9:8f:3d:94:fd:eb:c3:fe:
         b6:31:10:01:81:5e:0e:b2:74:4f:bd:24:a4:f9:48:1f:4d:23:
         64:bd:b8:96:2d:62:9a:83:45:0a:33:d1:d8:44:a9:cd:d7:4e:
         3a:b1:94:ef:bf:e5:47:fe:84:36:43:29:f5:35:57:51:93:ed:
         74:00:8b:9b:5b:2b:5b:38:5e:c4:e0:d6:45:7b:2d:8c:f2:97:
         d0:90:9c:e1:bf:4b:3e:4b:f6:33:14:c3:ea:f6:16:89:cf:12:
         1c:15:89:18:b4:1b:c8:1c:1b:f4:a5:2d:5f:a3:91:ff:1b:9d:
         71:be:7c:7d:6d:e1:6b:c0:76:36:e2:dd:a7:da:d0:ff:72:4f:
         09:3e:6c:85:b9:aa:f6:d0:4a:12:26:ba:ed:46:ed:8a:9a:01:
         31:25:2a:e9:88:2a:da:71:6b:7c:66:ef:82:18:03:01:d9:31:
         72:7f:78:88:31:ac:50:c6:4d:33:e9:85:57:91:75:10:4f:63:
         92:41:3f:97:98:e8:0f:8e:bc:65:81:1b:ea:0c:49:94:e0:3a:
         6b:01:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:25 2024 by rpki-client on console-ams.rpki-client.org