Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/621fc1bb-334a-3357-a4ce-cebd8432a8fe.roa
File:                     621fc1bb-334a-3357-a4ce-cebd8432a8fe.roa (raw, json)
Hash identifier:          yycN5v5FF9MOlnNKWf1ykX5+lytU1u+UgRzBB2t9poI=
Subject key identifier:   09:93:D6:E8:20:C6:6C:E5:5F:D7:DC:AC:F0:24:7A:6A:01:A1:90:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E774EA35062904661EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/621fc1bb-334a-3357-a4ce-cebd8432a8fe.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        69.142.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:77:4e:a3:50:62:90:46:61:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0e31a2dc-f36d-4ba4-9a8c-ba9229569983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:78:51:f7:9f:ed:05:c8:3e:cb:18:55:ff:
                    50:46:dc:51:43:83:3e:ab:93:d6:42:26:68:a4:ee:
                    2f:2f:c9:d1:ba:b9:84:f2:e9:1a:d5:77:dd:9b:8b:
                    47:50:e9:fc:9d:c1:e9:d3:df:bc:ee:39:e0:3d:a0:
                    7b:a7:41:f5:96:4c:2f:27:35:31:a0:fa:01:bb:fc:
                    78:cb:69:4a:9a:66:73:9a:96:8d:8a:05:6b:72:24:
                    2a:ec:d5:29:26:a4:54:a3:8b:d2:7e:bd:df:ac:d1:
                    9e:e4:6c:6f:2c:29:31:44:21:9c:fa:5b:40:20:85:
                    a2:8b:ee:33:b5:7e:cf:72:7d:3f:5d:8a:36:67:82:
                    45:e4:82:41:7a:95:42:04:a4:dd:0e:fb:7f:73:27:
                    cb:3e:66:22:71:ae:e6:6d:93:3d:26:4f:e4:df:98:
                    33:a6:cc:cd:3b:68:e3:c5:da:a5:8d:d8:d4:61:05:
                    5c:f7:b5:2b:e9:77:b8:1f:6c:8f:a8:74:aa:e4:02:
                    31:8b:75:ba:0d:71:5d:85:87:57:59:c2:80:1d:86:
                    d8:ae:20:9b:06:01:10:82:37:1b:da:5e:fc:32:39:
                    94:a6:36:95:e8:de:10:b8:66:a9:47:3e:08:f2:38:
                    49:16:ac:99:34:cd:56:f4:44:98:43:82:6c:0d:4c:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:D6:E8:20:C6:6C:E5:5F:D7:DC:AC:F0:24:7A:6A:01:A1:90:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/621fc1bb-334a-3357-a4ce-cebd8432a8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:be:eb:a0:8d:be:fb:ed:55:1b:5a:7e:38:f5:5e:dd:5d:dd:
         e4:bb:20:fe:53:c7:6d:c1:1a:8a:92:08:6e:4c:6c:b4:4d:4e:
         dc:16:fa:cc:80:67:d3:40:e4:d3:a6:c7:13:b8:37:11:4e:ce:
         0f:4d:98:26:d5:bb:7f:40:7f:f7:9e:eb:16:21:3e:91:14:00:
         2a:88:bf:4d:80:f4:40:ee:3e:bb:c9:49:e2:96:1c:d5:f6:b3:
         eb:66:0e:4d:3e:52:3f:62:c5:d5:0c:8b:fc:8b:f6:b5:8a:fe:
         ad:e8:9f:de:11:50:4b:0b:6a:a5:29:34:41:c3:01:50:09:af:
         39:46:ca:51:3e:a6:6c:3f:d6:cb:5b:b9:f5:3f:a0:df:5f:35:
         fd:b1:fc:8f:bd:5d:dc:60:7f:ab:1d:62:9c:f1:6e:03:1f:7e:
         51:c8:2f:9a:72:ed:7c:b2:b5:08:d6:61:2f:a7:fd:94:ad:e4:
         7f:99:78:43:80:83:68:9e:92:2d:e7:4d:19:a7:6e:61:7d:b9:
         cb:7a:65:24:36:68:25:ee:d7:79:27:5b:5f:6d:64:1f:35:eb:
         7d:44:aa:d3:b7:36:ed:aa:6f:9c:d9:f8:c8:5b:a0:61:5d:31:
         c2:1a:24:26:ee:b8:c3:cd:25:22:c1:c1:9e:c9:76:ac:4c:e4:
         e2:dd:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:46 2024 by rpki-client on console-ams.rpki-client.org