Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eaa43c4-784c-3cb8-9d3a-370705f09f7c.roa
File:                     5eaa43c4-784c-3cb8-9d3a-370705f09f7c.roa (raw, json)
Hash identifier:          C6j/Tdq2fuU4aj8/AR/zSGHIdgW7IPccWr1mq6BcGdk=
Subject key identifier:   62:FA:C2:9A:25:E8:72:A4:0F:DA:7B:13:50:C5:4E:52:A5:DC:14:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CFD4BAD32A9820604A8037C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eaa43c4-784c-3cb8-9d3a-370705f09f7c.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     33653
IP address blocks:        76.134.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ba:d3:2a:98:20:60:4a:80:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=b328d1c7-adb8-49a6-814a-50ce7525ab0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:60:c6:46:18:32:30:88:4e:07:a1:43:7a:
                    b6:56:94:d8:42:cc:7c:ef:66:a3:4a:6a:0d:fe:83:
                    ca:8a:80:1e:26:f8:a9:c5:e2:8c:3a:79:fc:15:43:
                    87:3d:74:70:30:ba:72:55:63:e6:b6:2e:d7:64:f7:
                    4e:a3:00:75:67:63:25:31:67:5f:07:ce:0d:e2:9a:
                    45:f1:6c:1f:e0:c2:b7:34:9e:34:d1:96:ac:13:cc:
                    3b:89:e2:81:fb:d4:41:b3:ec:ff:a9:66:5c:75:65:
                    e5:71:5c:fd:01:04:6c:4b:c1:d9:d4:19:93:2c:76:
                    6e:d2:33:20:32:61:fa:a7:d2:b4:9c:85:6f:c8:d9:
                    79:ef:db:da:a6:a6:b9:c6:47:d0:b5:48:1d:27:f0:
                    31:ae:47:81:6f:09:4f:47:7d:59:43:99:66:a7:12:
                    a8:b8:c4:53:5c:40:f5:ff:d0:0d:fe:7e:40:74:bc:
                    53:5e:ea:4d:26:6d:41:4a:4a:72:0a:69:9f:62:5e:
                    87:e6:27:54:33:de:14:cc:87:7d:88:d8:33:df:d3:
                    03:b3:26:b5:54:f3:20:be:8c:4b:50:8b:8b:b1:11:
                    1c:4f:0e:9e:5c:09:52:43:0c:55:b1:4d:fd:de:47:
                    b3:d4:ed:04:43:bf:d5:bb:ff:d7:15:a9:11:c4:45:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:C2:9A:25:E8:72:A4:0F:DA:7B:13:50:C5:4E:52:A5:DC:14:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eaa43c4-784c-3cb8-9d3a-370705f09f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.134.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:ce:c3:6e:4a:63:bc:c7:b0:2e:34:2b:75:2c:fd:4b:0c:
         e9:39:03:9c:0a:9e:44:f7:0d:22:ce:a3:48:0c:cc:f1:e1:4e:
         87:1a:fd:b8:46:fc:e5:65:c4:17:08:e7:6c:41:ae:86:70:7f:
         7b:d8:81:a1:b7:14:d9:ec:37:9a:7e:47:73:84:56:b6:91:58:
         90:ba:13:54:4b:90:d6:cb:9a:e0:65:a0:86:f1:64:f9:65:f5:
         94:6f:89:16:b9:4b:20:a2:9d:dd:c9:fd:f5:b2:52:4f:ae:b3:
         7e:5c:31:31:16:58:6d:d6:d5:82:e0:c1:82:dd:7a:55:54:b3:
         4d:d9:51:2a:b1:74:31:75:b3:a5:b1:48:0f:20:c2:b6:1c:c1:
         34:98:01:ac:75:2b:79:c4:e3:02:16:e4:83:23:31:e9:9c:3f:
         9b:59:80:7a:73:3f:09:8a:db:51:83:7c:d4:6b:b3:95:f7:b0:
         28:1f:34:bb:dc:72:79:85:3a:ec:9b:3c:40:30:d4:aa:7c:c6:
         51:a3:ca:5c:e7:48:7d:b6:6b:93:ea:1b:fa:9f:01:9f:2e:1f:
         05:f1:3d:ab:f8:fb:90:34:35:34:d6:83:35:bf:24:05:c9:01:
         7d:fd:b7:6f:eb:ba:bb:ce:d7:b2:67:17:a3:e8:58:c9:26:1b:
         84:64:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:00:10 2024 by rpki-client on console-ams.rpki-client.org