Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/584e8c33-dc61-3d21-8366-06f434cbae2b.roa
File:                     584e8c33-dc61-3d21-8366-06f434cbae2b.roa (raw, json)
Hash identifier:          12ISKK+B+9tk5/yEtW2/2YyH+aTtv/qH6Y4amK2vMkM=
Subject key identifier:   FC:8E:F7:1F:EE:6D:A6:6F:9C:C1:0F:89:33:85:0D:DF:3A:67:B6:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BF2EBA47D2669A7CD3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/584e8c33-dc61-3d21-8366-06f434cbae2b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        71.194.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:f2:eb:a4:7d:26:69:a7:cd:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8c46c389-77f0-436f-a219-0b7af0949fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:d2:15:fd:f4:95:09:a9:c9:0d:3e:ce:7f:
                    68:f0:3b:7b:fc:9f:a1:59:b1:4c:c1:fa:7a:98:a2:
                    c6:fd:b7:fc:2f:d3:18:93:ab:f4:27:20:59:58:c0:
                    63:e9:14:2e:43:e4:68:77:3f:67:0c:08:bc:e9:96:
                    25:5c:29:3a:c1:e7:05:62:bf:f1:04:e1:5c:8b:e2:
                    00:bd:d4:4b:0a:1c:b7:47:f4:29:c4:d4:e4:66:00:
                    89:04:dd:a6:4c:b8:8a:b4:2f:65:c3:f7:e4:14:e8:
                    58:b9:35:28:85:f2:6d:0b:4e:29:da:5a:ec:cc:d1:
                    84:24:33:e2:d1:07:13:fb:e7:3e:20:30:3d:ef:13:
                    4c:88:05:8f:67:6d:d8:e1:90:b0:0e:b5:30:fb:8e:
                    9b:1f:3a:29:8f:41:78:3f:ff:c8:16:91:74:ff:b5:
                    6d:be:91:44:7c:76:ba:77:9a:35:9e:84:ed:2d:05:
                    d2:20:0e:47:07:f5:b2:70:88:eb:d7:a0:47:c0:48:
                    1d:19:af:62:00:a3:de:55:aa:fe:e0:8f:64:81:1e:
                    b5:14:1a:2a:6f:76:5e:da:d1:00:97:20:33:54:5f:
                    1d:49:d5:63:ff:bb:89:50:d1:bf:f1:44:ee:bf:d0:
                    d9:e2:56:04:b0:2d:96:bf:32:5d:dc:2d:b4:5e:6b:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8E:F7:1F:EE:6D:A6:6F:9C:C1:0F:89:33:85:0D:DF:3A:67:B6:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/584e8c33-dc61-3d21-8366-06f434cbae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:e0:3f:b0:b4:3f:d4:dd:aa:6d:ff:8c:30:de:99:88:6c:
         75:22:02:fa:18:4c:64:70:6a:17:20:7c:f3:18:82:fd:0a:33:
         e5:ad:b7:73:8e:a7:d0:44:68:b3:1a:02:36:31:b3:f6:04:ac:
         17:10:30:bf:b5:c3:bf:a0:f7:97:62:12:b5:4c:09:d6:c1:c4:
         64:15:0a:ca:51:8e:a9:ae:c3:2d:39:88:81:52:f4:4f:f4:a0:
         39:6c:6a:f0:00:10:7e:9b:92:c3:15:1f:4f:90:6a:62:fc:59:
         da:c8:f6:d6:d7:cf:ce:78:72:6a:c0:55:b1:a1:23:eb:00:ec:
         8a:4a:d1:01:d1:04:f2:6f:02:8a:79:8e:1f:56:49:d8:c7:0f:
         d2:8d:44:a8:26:df:d2:96:04:94:88:59:27:68:20:08:f5:a1:
         9c:5f:7c:3c:7d:4f:7c:ef:80:bf:72:4e:1e:91:d4:e7:7c:ad:
         0e:ce:1b:98:5f:db:7a:0b:4c:b2:27:5d:b3:f2:5d:cb:00:6b:
         bb:1e:f3:a9:c4:6a:6c:ea:fa:14:a6:67:9b:3b:2d:46:d5:10:
         5d:5b:bf:e4:18:1c:19:c8:51:a1:ca:60:c8:05:5d:66:8a:72:
         ae:ea:3b:ad:af:fd:57:9d:e0:d9:92:32:61:8a:d2:1c:25:1e:
         2d:aa:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:58:44 2024 by rpki-client on console-ams.rpki-client.org