Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5409-069f-36ea-830e-511c0d1223f5.roa
File:                     59fb5409-069f-36ea-830e-511c0d1223f5.roa (raw, json)
Hash identifier:          UJxq3PyTEmDhOgHZq12aGUTt/ZaCB37mNdfNvhVAUro=
Subject key identifier:   92:51:60:06:24:19:49:28:42:48:4B:62:97:DF:2A:3A:32:2C:3D:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584761717A0DB878678BC9559EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5409-069f-36ea-830e-511c0d1223f5.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     7015
IP address blocks:        71.232.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:7a:0d:b8:78:67:8b:c9:55:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=f57e2e09-ef5b-40cf-acb6-cd3c1b5ec3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:a2:58:3f:4d:de:fd:69:bd:57:7c:78:1b:
                    91:3c:31:cf:07:cb:83:05:c3:81:0a:b1:76:e9:0f:
                    32:2e:45:a3:eb:c1:14:fa:32:f7:ba:8a:cd:96:06:
                    25:48:7c:72:b2:a2:63:d1:de:13:06:2d:a8:b4:86:
                    e2:db:69:66:49:ca:a2:f4:02:3b:53:d0:0b:e8:ee:
                    5e:2c:1a:52:d5:13:56:8f:1a:30:13:1c:0e:be:02:
                    75:b2:c5:92:e6:6c:ca:61:b4:0e:29:59:d8:a6:25:
                    65:3a:02:36:3c:a0:c1:b9:57:f1:a5:5f:7c:9b:ab:
                    af:7f:ba:91:9b:ca:d0:a7:11:93:a1:93:7e:d0:09:
                    06:95:27:e5:3c:16:71:e0:dc:c5:32:af:e2:9b:9b:
                    1c:94:86:9f:00:d2:f4:79:c4:c0:c4:0d:17:6f:a8:
                    b1:c1:e3:0e:76:91:d1:16:cb:02:2e:68:7c:12:2b:
                    a6:ab:0b:8c:19:3e:be:e4:93:b4:16:95:9b:dd:b1:
                    89:14:be:2d:9a:de:19:cb:8e:8f:31:ee:bd:da:5c:
                    40:1c:60:46:d9:3b:da:d6:ad:76:f5:27:b3:ed:d1:
                    65:30:e0:fd:cd:bf:49:b3:5d:1a:19:5a:57:4c:5d:
                    47:26:57:a7:1d:56:5b:01:72:93:2c:22:e3:35:c9:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:60:06:24:19:49:28:42:48:4B:62:97:DF:2A:3A:32:2C:3D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5409-069f-36ea-830e-511c0d1223f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:5f:8e:61:ca:51:3d:ac:f8:48:0c:09:ce:1b:22:79:7b:38:
         a1:46:d0:d7:ee:e3:04:45:2e:af:2f:3d:de:f0:13:08:4f:61:
         0f:3f:ec:4c:99:17:56:ff:0c:ea:4a:9b:8c:1b:19:0d:a6:d9:
         39:c7:93:52:d2:e2:e1:f4:4c:49:f4:ee:76:ea:cf:40:af:8b:
         82:14:08:d9:a1:7e:67:04:e5:55:cf:61:52:f4:e3:2d:bd:d3:
         f5:08:b2:49:78:33:ea:b9:87:6b:79:a1:b3:70:72:d4:6f:c5:
         ba:49:15:85:1f:2d:9d:c3:06:b7:99:d2:2f:70:b5:2c:19:ec:
         3f:75:5d:46:83:82:f3:6d:d6:ae:7b:74:3c:23:11:49:22:44:
         3c:f3:0b:fe:21:3f:31:3f:97:93:66:20:4a:a7:a9:31:81:3d:
         9d:72:e4:c4:b8:92:f8:27:a6:5c:38:e3:8e:fe:76:60:92:93:
         ff:28:f7:cb:d8:a5:51:60:94:c0:70:3b:2e:ac:0c:66:b2:6f:
         21:0c:8f:fd:1c:d5:62:22:98:df:3a:62:61:79:f6:02:f2:da:
         55:20:6a:ba:4e:f9:e6:01:d9:d2:1f:1b:df:7e:b3:3f:ef:3c:
         34:5c:f7:15:9a:6c:fc:64:ce:41:17:61:62:60:25:51:4b:cc:
         75:2c:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:00 2024 by rpki-client on console-ams.rpki-client.org