Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b56170b-bf7b-3fab-a966-4afa7ff13995.roa
File:                     5b56170b-bf7b-3fab-a966-4afa7ff13995.roa (raw, json)
Hash identifier:          1qyitsML9hE4MSuElMzi044GDa+OmGgIxr2Ka/jPdOM=
Subject key identifier:   72:3E:49:A1:E2:CB:24:C7:D7:83:E1:71:42:22:03:51:C9:FF:A2:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C65B6D2FC4B1F80567EE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b56170b-bf7b-3fab-a966-4afa7ff13995.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.218.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:5b:6d:2f:c4:b1:f8:05:67:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=75f2bb5d-4ce9-4128-95b9-a16d6f775b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:bc:55:33:c4:94:16:72:45:64:53:31:f9:
                    5b:3e:b3:c5:0d:f7:16:a7:64:cc:58:86:17:33:1a:
                    0e:93:61:59:8e:e2:77:55:5b:a3:9a:87:ab:d4:1c:
                    bb:ed:0d:f9:5d:dd:07:c9:a9:da:42:a9:a8:dd:56:
                    ff:5e:70:45:e4:77:6f:50:8b:7d:a4:7b:21:e3:e7:
                    61:9f:4f:f0:8f:98:6d:24:07:4f:d4:5d:19:1d:b2:
                    da:bc:20:66:6e:69:e3:8b:e9:54:90:b4:81:af:f9:
                    e2:7f:82:00:4a:15:ee:97:ae:63:8e:08:f7:5f:36:
                    85:fd:28:33:08:2b:8d:47:d7:a4:ce:fc:d1:51:44:
                    59:5f:24:f8:46:0f:91:2e:6d:47:5b:01:20:fe:23:
                    45:3d:bd:f4:6e:d6:ab:11:f1:af:f6:92:e5:19:ef:
                    95:82:46:36:e5:95:67:e9:6e:61:29:8d:92:31:5c:
                    26:5c:66:12:28:a2:18:2d:7e:0e:7f:c6:b4:dc:86:
                    97:f1:af:6e:17:6b:22:f2:14:a2:42:c8:8a:fe:ba:
                    c4:7a:a9:0e:56:14:cf:56:f4:ab:27:fc:e9:70:ee:
                    59:db:70:2d:ee:7b:ee:4a:16:dc:95:81:52:97:c2:
                    16:c7:9e:3b:bc:c6:a9:94:7f:66:c1:fe:13:c6:9a:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:49:A1:E2:CB:24:C7:D7:83:E1:71:42:22:03:51:C9:FF:A2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b56170b-bf7b-3fab-a966-4afa7ff13995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:f4:5c:d3:aa:bb:37:a2:c0:67:36:97:60:46:be:ff:24:
         04:a3:35:6e:68:7d:5b:7f:86:88:b4:8b:b1:73:6c:3e:68:24:
         dc:29:3b:7c:b3:2f:6a:a5:27:f5:a0:fb:7b:03:6a:48:84:60:
         d5:ab:c6:99:84:fb:a2:09:ee:ee:53:6a:bc:fe:10:c1:68:8c:
         30:9c:6a:66:f3:60:ce:12:78:25:bc:7a:0a:ec:0a:48:4d:38:
         b6:56:73:63:2a:24:b4:25:9b:d5:ae:0a:6a:50:8d:7e:5f:90:
         06:61:cf:f3:5e:a5:c3:1d:71:ea:7a:ec:88:fd:49:45:55:d3:
         2a:21:74:47:40:a2:cf:b5:69:04:60:53:f1:d6:60:78:78:ef:
         91:0c:54:53:e9:35:94:df:a2:46:7b:7f:f1:85:14:84:5e:e0:
         22:7a:f3:77:77:3b:ea:0b:b8:13:5c:a3:70:88:e5:27:97:e3:
         2b:00:c3:55:7c:be:86:ba:47:32:9b:5a:78:44:25:3c:e6:76:
         4d:b0:96:24:b6:59:f7:ca:87:cb:07:29:70:22:d6:eb:76:dd:
         52:84:e0:f8:0a:e3:ab:9e:0e:76:bb:14:64:b1:dd:d9:66:53:
         ee:8b:71:c4:67:e6:dd:19:3e:c4:68:77:99:61:66:79:c7:fd:
         cb:1d:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:07 2024 by rpki-client on console-ams.rpki-client.org