Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613f3c51-1896-3b41-8002-30cd5d3d3d5a.roa
File:                     613f3c51-1896-3b41-8002-30cd5d3d3d5a.roa (raw, json)
Hash identifier:          8TZ5/CN/e23r84dLnI2UoRQd9DibBLRz6j6hJlik/RY=
Subject key identifier:   0B:96:71:20:0E:A5:2F:94:56:25:99:B8:32:F0:53:E8:1D:0E:0B:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584811702D88BF289671D658C220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613f3c51-1896-3b41-8002-30cd5d3d3d5a.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        76.107.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:2d:88:bf:28:96:71:d6:58:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=f1dc88f2-9cf6-4eef-bf3d-b94935e3e941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:ce:da:d7:d9:ec:1e:e8:cf:4e:1e:4d:d6:
                    d6:82:ea:c8:79:a1:b5:6b:49:3a:00:2d:66:9d:0a:
                    8d:9c:50:17:8b:9c:98:9c:4a:ed:bc:ce:2c:54:9c:
                    a8:4e:1c:c2:8d:c5:a0:45:8e:5f:95:8a:98:bf:64:
                    31:06:e6:13:91:df:4b:52:95:db:ae:4b:ca:2b:14:
                    c5:84:f3:b9:29:f1:e0:7e:fa:24:75:62:da:6e:4f:
                    3f:19:a6:ed:c9:bb:9c:f8:35:8c:1b:52:20:56:e9:
                    3d:e3:f7:12:db:42:4c:10:3b:08:9c:4f:ec:c0:84:
                    b3:39:b4:aa:79:91:b8:fd:65:89:3e:46:b1:d9:46:
                    db:9a:3d:34:2e:fc:35:19:77:0c:a0:64:b2:5a:88:
                    70:da:01:5a:65:fe:54:5e:57:8f:66:d2:84:e6:a3:
                    f9:ac:5f:90:c3:52:2c:db:0f:50:dd:ad:e6:45:d2:
                    10:b7:8b:e4:00:97:46:6a:06:c9:5b:11:9a:63:55:
                    83:7e:84:8b:66:69:c2:dc:b6:45:89:a8:3d:22:de:
                    ce:b3:82:66:be:e5:93:cd:d4:57:df:d9:09:51:56:
                    ba:6d:3b:01:d8:aa:60:07:38:93:00:6b:9c:48:f7:
                    90:f9:65:2b:53:e6:74:8e:b4:af:1f:82:ba:15:72:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:71:20:0E:A5:2F:94:56:25:99:B8:32:F0:53:E8:1D:0E:0B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613f3c51-1896-3b41-8002-30cd5d3d3d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:55:b1:3b:4e:53:02:7a:79:1e:21:39:db:e6:2c:d8:86:a9:
         19:c9:b5:53:ce:4e:25:61:21:eb:58:39:97:32:18:a8:ed:b0:
         2d:80:6e:bb:b0:cb:94:d5:23:83:ac:76:b3:c0:ad:49:37:ec:
         c7:5d:7a:b2:4b:47:e0:97:4f:09:c5:53:09:60:82:a8:f2:c8:
         9f:bb:e8:6c:b4:d6:82:9a:b9:5a:44:d6:61:b9:64:a6:16:d3:
         de:48:2f:2b:be:6c:f0:da:92:22:54:fb:89:16:b5:02:7d:cd:
         71:56:5b:1a:12:34:7a:f5:e2:c8:d5:52:55:f2:ed:fc:ef:60:
         7c:87:e8:4f:cd:3a:ce:e4:53:ea:6d:42:e9:01:7d:5c:b7:d3:
         c4:12:e0:9e:9c:80:17:fb:32:c7:9c:fb:45:2e:b2:fa:c8:7c:
         fe:ca:a6:1f:31:71:03:99:77:a8:0d:88:1a:8e:b1:5a:14:f8:
         53:55:36:57:ce:72:24:7f:c1:8f:28:20:e3:e4:e3:c0:12:98:
         11:39:f6:6a:36:20:6b:a0:5e:a1:ee:00:6e:12:30:28:72:23:
         8b:f7:bd:3c:82:d8:50:85:1d:7f:dd:7a:47:d3:94:3b:7e:90:
         49:ff:94:99:97:21:4e:c4:83:9e:2c:f4:29:07:a4:b7:60:68:
         d2:12:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:13:24 2024 by rpki-client on console-fra.rpki-client.org