Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c25671c-0d07-3bb6-b0cf-910c7833ce78.roa
File:                     6c25671c-0d07-3bb6-b0cf-910c7833ce78.roa (raw, json)
Hash identifier:          S2Pf5uIuITY2rfLJ6oOvjI7n0Nc6e5F9tjSSjjAWv/s=
Subject key identifier:   B1:F9:9E:4C:D2:D8:00:F5:21:89:F3:A2:D1:F1:B3:15:C5:D0:AE:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C8F9E08AA1C56F2EA2C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c25671c-0d07-3bb6-b0cf-910c7833ce78.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        76.139.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:8f:9e:08:aa:1c:56:f2:ea:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ea3c5bdb-7f55-4033-94ce-ec12ea3eedf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:d3:69:ba:8b:a5:08:8b:78:e7:c7:c9:cb:
                    5f:2b:81:62:89:98:7e:e2:9e:f4:39:7d:b3:93:b8:
                    7c:aa:fd:3c:f9:51:18:b9:95:f4:3b:9f:8e:58:40:
                    07:1a:6e:a8:fc:56:c5:78:d7:ad:ed:dc:8c:8a:12:
                    fa:51:e3:bb:5a:6e:63:24:26:4a:e6:7d:02:fd:87:
                    c4:5d:78:f5:b9:fc:af:f0:48:09:97:72:b9:df:82:
                    48:88:24:02:b4:9b:5f:c6:01:85:01:a2:d3:ea:d2:
                    fd:59:a3:17:1b:ae:3b:c7:09:23:fc:a6:79:f3:e4:
                    f0:5a:9d:db:fd:dc:b2:81:96:c3:d4:10:13:a6:11:
                    15:49:1f:6d:0d:d3:06:59:cc:2f:56:a1:d3:8c:6e:
                    ae:d8:4f:24:08:8a:c3:63:78:8c:bb:d0:2b:f2:d2:
                    70:20:5b:10:39:8a:cc:87:c8:69:4f:cb:e2:f1:ab:
                    d8:b3:ce:8f:36:8d:4c:49:55:ba:a9:a8:a8:6f:27:
                    64:72:e2:25:74:4a:ed:7f:3a:fb:ed:83:06:0b:51:
                    38:10:4a:31:b4:15:9d:0e:90:37:a4:7b:9c:70:2c:
                    12:0e:07:19:a5:80:d8:d6:59:de:db:af:cc:bf:7d:
                    be:a1:1c:fc:d8:9c:17:20:ca:3a:7e:ab:ae:94:6a:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:9E:4C:D2:D8:00:F5:21:89:F3:A2:D1:F1:B3:15:C5:D0:AE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c25671c-0d07-3bb6-b0cf-910c7833ce78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:32:7b:bc:2e:1e:46:76:26:c8:0a:21:d6:aa:5d:c8:12:97:
         ba:ee:25:c2:bf:8e:0a:7a:c8:53:48:11:43:b1:7b:cb:bd:7c:
         3a:2e:b4:cd:74:0c:d6:7e:21:2d:f4:d6:9e:88:d9:32:c0:d7:
         ad:fc:33:cd:15:6c:b1:12:44:f2:22:85:27:1e:ce:f5:69:12:
         76:e1:09:c4:1e:4e:99:29:e4:ef:f7:fa:d2:6a:e3:0a:85:d7:
         55:3d:ed:54:2f:e3:7b:39:ab:18:43:0e:94:a1:29:d4:58:36:
         ae:23:a6:2a:74:f0:1e:60:99:29:09:9a:98:0a:12:ff:31:4f:
         ef:39:32:03:ef:6a:a5:ea:91:9c:13:fd:53:9c:27:b1:d0:36:
         c6:dc:39:e9:f2:8b:90:6e:5b:80:dd:39:b7:24:41:91:82:8a:
         2c:d3:6c:be:3b:d1:89:8b:ac:40:c9:9c:3b:2d:c0:d2:d7:0d:
         a1:30:e9:ad:30:e2:ab:78:86:46:de:62:0d:b1:9e:1d:5d:38:
         d0:c6:87:ee:6d:a7:a4:0e:61:22:6f:28:2c:30:6a:85:75:63:
         a9:3c:98:8f:87:2d:06:b5:d0:20:29:a1:b5:d3:f9:ad:c5:b2:
         ad:48:b5:9a:a1:3e:8e:9b:68:f4:62:ea:41:7a:69:34:47:4f:
         f5:4d:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:26:52 2024 by rpki-client on console-ams.rpki-client.org