Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6365966a-eae6-32a4-b76a-0f7a47d39581.roa
File:                     6365966a-eae6-32a4-b76a-0f7a47d39581.roa (raw, json)
Hash identifier:          gOQnrIe+xRxk8ooT1GjvPf5y8eqx/zgP5UgKNS2AVAY=
Subject key identifier:   3A:77:C9:0F:AC:8E:3A:90:76:42:E2:EB:87:FA:AB:11:33:D7:D1:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6EEE2A833DA7D3975E7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6365966a-eae6-32a4-b76a-0f7a47d39581.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        70.91.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:ee:e2:a8:33:da:7d:39:75:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b9370dcf-deee-46b3-b41c-fb3b85af37da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:1f:3d:d4:9d:64:13:7c:29:f7:44:a0:68:
                    05:10:d9:bf:af:4e:78:6f:7f:75:c6:54:58:40:ef:
                    eb:4b:33:02:f5:cb:d2:15:55:3c:d9:4c:33:ad:33:
                    d4:c8:1c:f9:86:df:66:25:90:5f:e0:43:da:0d:07:
                    fc:89:fa:35:eb:d0:94:58:86:37:bd:7f:9d:9b:dc:
                    e7:ba:ca:85:9e:e6:98:20:8d:6c:d8:55:8f:8c:ca:
                    36:16:46:72:a7:47:56:13:04:61:09:01:cf:88:75:
                    1d:ee:e4:3f:80:ae:69:fc:d8:d3:c7:60:6b:83:87:
                    c4:67:08:b3:23:09:0f:a6:4c:00:40:19:14:f6:c9:
                    fd:56:b8:a4:45:d2:cc:a1:49:24:73:72:92:70:4a:
                    6b:11:b5:51:92:af:2c:34:9e:02:0a:41:62:d8:9b:
                    61:c8:1c:0d:e8:15:b2:80:04:be:6f:65:77:c2:64:
                    94:2a:ca:1b:41:1b:ec:55:b9:75:96:fe:e4:eb:8a:
                    3f:f2:f8:4e:de:ac:e9:85:f5:48:3f:c1:da:d9:c1:
                    d1:11:d8:ae:51:db:61:92:ba:03:c4:1c:f6:b5:bb:
                    31:a7:78:7f:43:d2:07:54:92:8a:84:ce:1c:a2:13:
                    29:58:73:c0:99:a4:62:26:25:fb:41:a1:90:41:a8:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:C9:0F:AC:8E:3A:90:76:42:E2:EB:87:FA:AB:11:33:D7:D1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6365966a-eae6-32a4-b76a-0f7a47d39581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.91.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:65:41:20:ec:72:b8:f4:aa:5d:62:aa:b2:98:d9:59:91:
         84:e1:3d:96:74:93:67:d1:0e:06:79:c2:ff:34:9e:95:eb:c2:
         73:55:47:7f:85:a1:ec:b5:9d:32:fc:28:fc:7f:87:64:aa:7b:
         04:ff:33:d7:08:b4:1c:b9:fa:b9:e6:19:d8:68:26:01:df:eb:
         91:53:4e:42:96:6e:a7:f9:ac:f9:d5:39:06:67:04:01:1a:43:
         48:15:6d:c2:2a:bf:f0:45:b8:3a:1e:41:94:2e:50:54:4e:62:
         3d:c7:5e:75:14:51:39:35:b5:12:ef:05:a8:11:72:54:ae:0a:
         4f:18:04:30:f6:0f:51:c3:91:90:31:f4:f3:ec:1c:c3:74:bd:
         d6:37:88:f4:b1:af:e1:b6:3f:c0:5d:c5:4e:90:d9:55:13:03:
         58:7a:67:54:d5:72:22:86:e0:01:08:16:02:a6:fa:45:a5:66:
         aa:95:51:90:d8:89:a9:f0:4d:4f:e3:ef:54:b7:43:71:c1:60:
         ee:fa:c7:24:04:ad:7e:b9:c4:24:29:c3:6e:4e:3d:aa:f4:69:
         cb:e5:84:43:f7:ea:9d:80:9b:d5:74:64:1b:ad:4e:8c:06:c8:
         2e:0a:a7:01:2a:b0:ef:3f:bc:b8:25:49:1e:ca:f6:d1:54:8c:
         f7:fa:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:13:45 2024 by rpki-client on console-fra.rpki-client.org