Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bc132-c63c-396b-868b-42eb484e1c16.roa
File:                     9a2bc132-c63c-396b-868b-42eb484e1c16.roa (raw, json)
Hash identifier:          oFvT53uvTaW3nMWwTwjOjnzlufnT0LClTN2m/ABQSwY=
Subject key identifier:   68:02:D9:F0:00:8F:79:60:88:37:16:2D:48:90:D9:DC:12:8C:0D:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EBABB23D28AA8AA63F480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bc132-c63c-396b-868b-42eb484e1c16.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        69.253.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:ba:bb:23:d2:8a:a8:aa:63:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=4243d713-c7ea-4a1d-a628-c327b3839733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:ce:b5:59:52:e1:17:d6:d5:69:01:0d:6a:
                    43:f6:63:e2:52:0e:23:b2:60:45:36:52:1d:f1:31:
                    fe:db:bf:5d:95:f9:67:df:cd:5d:0f:92:4a:ae:57:
                    df:13:3c:aa:6f:1e:80:e8:bd:88:58:15:29:7c:5f:
                    21:ee:4c:09:e1:bf:9e:6a:ff:26:db:ab:9a:bf:7a:
                    85:7f:11:ac:08:97:90:10:35:56:4b:ac:3f:af:db:
                    bf:20:ed:d4:9f:5c:16:c0:e8:bf:a2:59:3e:38:25:
                    aa:20:64:b8:68:44:ae:bf:dc:98:ed:f2:9c:50:92:
                    e4:ef:a0:43:64:d1:e4:11:b3:50:d8:cf:db:cb:5f:
                    56:ac:22:0b:c8:f0:79:e6:9f:15:32:82:12:22:a4:
                    9e:1d:da:16:fe:d7:f5:d4:61:ce:3c:43:4f:1f:e6:
                    96:39:82:8a:00:75:5a:17:53:b0:6a:c4:e8:db:2e:
                    38:5a:41:bc:aa:ca:a8:94:00:16:10:90:a3:1b:a4:
                    fc:5e:b5:9a:44:1a:9c:86:05:38:65:2b:e0:56:c5:
                    73:ba:4c:8c:3d:89:65:e0:a8:2d:a8:02:6e:68:2c:
                    44:2d:bb:09:45:d2:80:fa:10:98:35:70:85:1a:7d:
                    14:22:b6:12:3d:40:41:36:3e:d9:88:49:85:39:c3:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:D9:F0:00:8F:79:60:88:37:16:2D:48:90:D9:DC:12:8C:0D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bc132-c63c-396b-868b-42eb484e1c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:b4:0b:80:6c:34:00:47:3e:d8:35:5d:b0:b6:03:0c:d0:
         77:04:09:d4:53:86:79:6e:55:84:de:0b:c8:6d:19:0e:fb:7a:
         dd:3c:91:90:12:49:c8:4a:75:d7:0d:a4:53:cf:89:17:fa:9b:
         9e:8d:ea:6d:c6:8f:7c:ab:9d:27:1b:05:b8:4f:8d:aa:fa:5d:
         bf:ff:33:21:38:0c:fa:17:42:3e:09:41:48:14:f2:b6:88:88:
         55:cf:9e:e9:aa:57:8a:83:38:68:04:5a:fd:2c:6b:eb:b0:81:
         72:5e:25:0f:29:06:2a:fe:6a:3b:09:30:5b:f8:4c:6e:ee:04:
         e4:cd:6a:59:dc:9a:0d:4a:bb:57:0c:82:02:c4:0b:c3:d2:b9:
         a2:ed:6a:01:74:8c:ec:bd:b3:94:aa:7f:46:c2:70:6b:6b:fe:
         3c:63:40:33:9f:3b:39:01:ea:c9:8a:39:aa:ab:c2:ac:ac:29:
         12:23:af:75:41:2e:39:aa:aa:57:af:98:33:c7:b5:5e:86:4b:
         78:75:d7:21:21:cf:33:9e:a5:72:04:cc:f2:62:34:9f:6a:ce:
         0b:b1:98:a1:96:d6:cb:0c:b3:fd:84:bb:be:8c:51:64:98:84:
         a5:f1:39:15:e2:a6:17:71:78:77:4e:0a:2d:ad:3f:e2:f8:63:
         bb:ad:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:33 2024 by rpki-client on console-ams.rpki-client.org