Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81242105-7d75-38b3-9fe2-8b292f2dcf1b.roa
File:                     81242105-7d75-38b3-9fe2-8b292f2dcf1b.roa (raw, json)
Hash identifier:          30cq49oBd/AYLJIWqX+cJZUvuGxHaQnQpfzXU1/qr0A=
Subject key identifier:   70:BF:4C:EF:F7:07:4A:8D:F6:36:59:65:41:76:F9:34:B0:9F:FE:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7611A369EC05EF9288C50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81242105-7d75-38b3-9fe2-8b292f2dcf1b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        107.5.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:61:1a:36:9e:c0:5e:f9:28:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=768701a6-643b-440d-a0e9-e550017b483b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:18:32:48:d9:e7:82:d4:01:b1:de:d2:37:
                    cc:39:fc:46:a9:5e:86:74:de:70:0d:ba:f0:f8:2a:
                    37:de:8e:e5:bd:ec:cd:92:04:68:1c:b5:05:76:92:
                    e4:9a:17:a6:be:e2:4e:b6:0f:7b:20:01:75:2e:d7:
                    2a:a1:c0:7e:44:bc:10:7f:d5:b7:a2:65:68:f1:98:
                    43:68:a6:87:47:b1:12:5d:d6:99:e2:59:7f:6b:c2:
                    14:9a:31:bb:f4:a8:59:54:21:39:4f:a8:a1:54:dd:
                    c2:e2:43:ee:ef:02:9a:a8:7b:06:c2:eb:b2:88:7f:
                    e1:01:1b:4b:3f:29:e6:c9:f7:14:a2:2d:dc:3f:bb:
                    8c:a3:2e:5e:74:29:45:0c:5d:88:57:9e:b8:d0:82:
                    c3:c4:96:33:3a:74:20:94:21:67:e5:fb:fa:62:29:
                    52:e8:87:96:91:75:a2:e1:96:06:ee:ad:b1:00:9f:
                    12:05:1d:b3:54:cb:4f:6f:47:3d:27:48:f5:9d:9b:
                    8a:5c:ce:aa:5f:39:79:39:07:35:4f:4f:0d:8e:41:
                    00:b3:b5:4c:6c:2d:3c:e2:67:59:e3:9a:37:e3:e4:
                    24:31:90:ac:24:30:82:78:19:77:6b:87:f2:d4:cb:
                    63:8c:b4:3b:ea:bf:27:3c:96:d5:b3:f4:67:75:c6:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:4C:EF:F7:07:4A:8D:F6:36:59:65:41:76:F9:34:B0:9F:FE:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81242105-7d75-38b3-9fe2-8b292f2dcf1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:50:1d:9b:2c:9b:0a:d9:fa:b5:99:f0:1c:17:e2:40:a1:55:
         f5:fd:cd:a4:3d:4e:2e:1a:f7:c6:14:f9:a9:69:b3:17:7a:ed:
         82:1a:8e:49:67:27:cf:33:9a:cf:0b:b9:ab:04:52:dd:a7:17:
         3c:fd:93:b6:f9:6a:f0:c7:48:63:08:f9:e0:b9:b8:f3:23:50:
         c1:00:90:9f:60:7a:58:71:8c:a7:8f:4b:6a:ae:d1:3a:4d:c5:
         0f:ab:38:c0:7b:06:4f:a0:e3:95:b7:f0:1f:36:65:93:d3:b9:
         d3:18:e4:65:92:dd:a1:58:34:19:2b:24:15:2a:cb:78:e3:f0:
         45:22:4d:b6:4c:ed:ac:23:82:52:16:07:12:8b:ff:59:52:0d:
         0b:8c:6a:ed:e6:bc:fb:a6:14:d1:1f:64:47:79:8c:f9:a8:8e:
         2d:24:b9:1b:3a:2a:01:b8:8b:0c:4e:49:78:68:12:61:06:af:
         a5:6f:c2:ac:a3:e8:1f:c1:ae:78:0e:25:dc:9e:fc:6e:bf:0e:
         dd:23:24:19:d7:7a:35:5f:12:7a:10:76:66:30:2d:54:0f:bb:
         ba:92:84:80:f7:32:cf:52:25:d6:91:37:92:72:2c:47:60:1b:
         8f:90:64:55:ef:ef:48:1f:e8:0a:9f:4d:81:1a:70:a6:6d:1e:
         99:ed:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:50:37 2024 by rpki-client on console-fra.rpki-client.org