Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95729ef2-7a3e-3e78-bfa0-fca521367315.roa
File:                     95729ef2-7a3e-3e78-bfa0-fca521367315.roa (raw, json)
Hash identifier:          b4gWmJI/OypCPInjFT3fzjwWdQr+UQW9o3rRCIlmp6s=
Subject key identifier:   62:57:70:66:CA:89:5E:8E:FD:6E:15:F2:67:36:37:D7:25:9D:60:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EB8427CFE09ED6E343A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95729ef2-7a3e-3e78-bfa0-fca521367315.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        69.242.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:b8:42:7c:fe:09:ed:6e:34:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d3b246da-02f9-43b5-8857-ea82e743fb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:2b:f8:6c:b2:fb:d9:b5:1c:1e:73:27:6e:
                    b3:51:20:63:d1:1e:7d:37:53:ed:87:c6:bd:aa:24:
                    41:4b:e9:89:56:f2:25:07:0a:71:bd:c8:09:09:c3:
                    23:c8:00:4c:82:33:c3:5f:78:8a:da:e8:e6:b7:64:
                    1a:6a:3a:b1:38:02:14:b2:58:4a:64:3b:5b:5f:e5:
                    b0:d8:38:10:24:9e:60:4e:9f:9e:5e:05:14:d1:25:
                    7d:c4:3b:e9:e0:93:f3:f2:ee:72:80:0f:0a:cb:7e:
                    f9:10:b8:7e:71:8b:e0:5d:43:7f:56:a8:08:27:06:
                    24:e7:aa:66:05:71:bc:e0:47:b5:99:14:15:cf:7a:
                    11:b4:e2:74:09:d5:69:7e:76:8b:4f:3f:dc:50:29:
                    81:24:4b:67:19:b7:fb:3d:eb:3b:2c:84:44:60:b8:
                    2d:4d:38:2b:3e:e3:64:81:14:d4:25:4e:38:2f:30:
                    f3:a5:d5:71:03:d3:46:17:0f:bf:5a:06:da:e5:f5:
                    c8:1d:00:c8:d3:1e:d8:af:d1:d0:45:b7:30:31:97:
                    9e:99:ce:92:28:33:b6:2d:9f:d3:03:22:81:5d:d4:
                    b8:f0:3d:22:2d:0b:9d:9a:83:0c:0f:17:01:98:d2:
                    fd:f8:99:d0:55:aa:d5:03:5c:aa:cf:95:cd:ea:17:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:70:66:CA:89:5E:8E:FD:6E:15:F2:67:36:37:D7:25:9D:60:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95729ef2-7a3e-3e78-bfa0-fca521367315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.242.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:fe:16:8e:33:39:e5:a6:b3:87:4f:78:ab:2d:17:6d:e9:
         1b:66:60:7a:cb:1e:6c:d8:12:7c:a1:52:1d:58:a5:7c:3f:da:
         83:60:43:ae:85:af:1b:c8:dd:a7:77:ac:66:97:da:b2:5c:c6:
         10:a2:3a:48:cf:17:7a:69:ea:f0:93:92:5b:12:c2:a2:6e:25:
         37:86:d9:c8:13:a3:ae:7c:fc:07:a4:1c:64:eb:24:ae:cf:1b:
         68:30:4c:ce:f1:4b:e3:f6:94:cd:cd:e3:03:9e:85:6f:fd:c1:
         3d:3a:4d:75:7e:8c:be:1b:8c:b9:b5:62:b1:ef:04:dd:b7:f6:
         71:23:61:1c:8b:8e:2a:21:0e:d7:28:13:a9:d9:a6:32:43:fd:
         f8:02:3b:63:0d:6e:08:27:51:50:41:5e:1f:e8:46:0d:07:05:
         1b:31:aa:60:42:43:b5:e0:a8:a7:49:b3:c9:d9:36:5f:87:f1:
         87:fa:3b:41:2b:a3:57:73:5c:7a:ae:a7:7d:35:5e:11:b7:11:
         9b:65:eb:48:af:06:77:9c:c7:b0:ba:e1:6b:17:a2:c2:a9:5d:
         51:76:1c:fa:b2:28:39:33:f8:fa:9c:73:7d:43:4f:0f:0a:1d:
         f1:b2:31:7b:71:2c:eb:ef:2e:1e:bc:fa:39:45:d5:8d:19:d6:
         6f:f5:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:30:17 2024 by rpki-client on console-fra.rpki-client.org