Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa
File:                     8e12ae43-44b7-39d9-ace0-d46255696345.roa (raw, json)
Hash identifier:          ITi5vJTJ3vNm2PUODlecHu+LosI31Zvwf4FUj68BjuM=
Subject key identifier:   2C:9F:9D:2B:52:B7:4B:18:74:89:1D:F9:F1:DA:2C:2D:06:E1:BF:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DD74F17426BB0BCBDD580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.149.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:d7:4f:17:42:6b:b0:bc:bd:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ef539565-4bc8-41f4-b624-763338b7ad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:6b:07:33:31:ea:33:c3:ae:cb:ef:0b:e6:
                    6f:66:08:6c:6e:0a:47:b0:94:75:ed:1e:1a:52:1d:
                    06:a3:d5:d4:9a:d1:72:02:ed:44:64:37:99:5e:8c:
                    e1:9b:47:72:82:b2:64:c5:ae:f0:ea:56:75:3b:82:
                    d4:f6:15:96:f9:22:3c:e2:14:57:aa:00:b2:05:ce:
                    92:0d:4a:ee:36:ad:5e:02:ae:73:85:b1:10:da:fc:
                    c7:6f:88:b5:b7:4f:ba:f6:a0:6d:aa:f4:47:e6:f5:
                    d9:79:7a:ac:d3:ab:ca:67:ff:f3:a1:cc:3a:ec:b4:
                    0a:e3:66:eb:d6:eb:a9:5c:87:fd:bb:d4:23:23:4c:
                    83:d3:51:a3:ad:7d:2a:51:5f:5f:b6:b8:4d:b0:35:
                    75:45:15:4b:c6:81:75:6f:3e:73:86:22:5b:0c:ae:
                    1e:cd:5a:58:bb:8e:22:4f:17:ba:e3:4f:32:98:df:
                    4a:a4:34:10:8e:e9:6c:89:91:22:f5:7b:68:5c:2a:
                    cf:64:64:de:cd:8a:c1:44:f4:d5:25:1c:a5:ad:7d:
                    e8:7d:c4:72:b3:b4:6e:85:7a:ed:bf:b1:d5:c9:20:
                    50:51:2e:72:01:2e:fa:9e:bf:d4:38:94:d1:cc:e6:
                    84:1f:00:2b:78:ba:56:91:8f:42:7e:0a:09:31:a7:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:9D:2B:52:B7:4B:18:74:89:1D:F9:F1:DA:2C:2D:06:E1:BF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:99:cc:8e:8c:70:38:ab:5f:e9:5a:46:60:d5:1d:cf:c7:34:
         21:1b:1a:3b:8c:e3:6b:5f:34:44:ea:c3:bf:fe:22:72:34:2b:
         4a:0e:ab:6e:71:51:87:da:6f:cf:8f:a7:7b:d1:5d:37:89:7b:
         42:8f:62:d1:f5:7c:0a:9b:8d:83:32:72:3a:d5:0d:a2:c7:db:
         22:57:b4:ee:63:fe:7d:61:cd:0d:da:e4:38:be:5f:2a:88:e9:
         95:ba:c7:eb:ff:04:d7:54:64:2a:60:aa:1b:9b:bf:6b:06:84:
         9c:ea:99:21:dd:e5:f6:9e:00:2b:8d:f1:a6:80:ad:d4:5b:23:
         e0:e3:3f:7e:46:61:e8:51:b6:db:fd:ab:4d:65:d9:4b:96:f4:
         63:0e:bc:1b:92:04:bf:ea:ac:1f:e1:40:67:78:8c:83:34:a9:
         22:5a:3e:a7:7e:78:8c:81:0a:1f:6b:f8:54:21:23:02:53:3a:
         69:90:97:c1:e7:e4:ee:49:47:fb:ea:03:4f:ea:ad:4f:cd:5c:
         a3:66:97:45:fd:33:ee:93:61:1b:b5:1a:46:e7:c7:1e:ca:11:
         ba:e8:d5:9b:ec:41:8f:4d:44:c7:4d:78:b7:a0:c2:b3:13:9e:
         94:35:77:d5:c8:9e:0f:60:e9:2c:c0:ca:69:23:69:47:ee:07:
         56:80:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:40:46 2024 by rpki-client on console-fra.rpki-client.org