Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e613723-51f8-3eea-a627-32964283055e.roa
File:                     9e613723-51f8-3eea-a627-32964283055e.roa (raw, json)
Hash identifier:          EKH1N8t4JYqzREBiY3bvqj4VRudpkrK98bSuC32EV+c=
Subject key identifier:   9D:89:B7:42:32:A9:96:04:F6:14:81:3C:06:C1:A7:8A:E5:6B:B5:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C604C8043C0D91A1A61FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e613723-51f8-3eea-a627-32964283055e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        71.63.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:04:c8:04:3c:0d:91:a1:a6:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=05b1e6f1-f354-49ed-8106-3dd45a65ce36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:dc:6f:94:77:8a:dd:e5:4a:ff:fa:b1:b7:
                    6d:66:b5:d0:2d:f3:64:a8:e5:5d:0d:32:95:db:88:
                    b8:58:32:ec:6a:28:44:0f:f2:3d:ae:1f:68:ec:9b:
                    9c:19:36:1a:ec:92:9e:9f:0e:f2:4e:99:e4:ff:fb:
                    6c:fb:62:17:b0:3d:48:4a:c1:0c:0d:63:a5:d7:d0:
                    ca:76:0b:8d:de:cb:dc:5a:43:c6:8b:02:89:dd:b5:
                    b7:48:04:75:57:56:77:6f:05:af:75:06:59:15:d3:
                    86:ff:6d:6c:07:96:49:2e:31:bd:1a:a8:7c:4e:b6:
                    6b:9a:87:7c:2e:57:ff:c3:ac:41:ec:6f:d2:5f:c9:
                    69:6d:e9:ad:b2:22:71:94:6d:97:cc:78:84:cb:40:
                    25:1f:e6:8d:70:44:02:18:bb:0a:83:52:d6:15:53:
                    85:65:30:81:7a:c1:d9:f3:5c:fe:f5:17:4e:ab:0d:
                    95:e8:fa:62:c5:53:4d:a0:b3:48:07:d7:86:3c:46:
                    af:6e:ff:09:df:ac:0f:fe:ca:e9:32:31:c6:12:59:
                    41:c9:f4:57:84:40:65:bf:e0:ee:d0:f6:51:fd:10:
                    32:f3:a4:43:55:59:f4:67:da:a7:3b:21:fe:5f:c1:
                    21:6e:18:6b:23:f0:12:af:a3:12:ca:f5:90:d0:7f:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:89:B7:42:32:A9:96:04:F6:14:81:3C:06:C1:A7:8A:E5:6B:B5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e613723-51f8-3eea-a627-32964283055e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:70:8f:94:4e:26:81:39:88:36:aa:e8:89:6c:95:ab:1c:
         6b:05:95:8e:19:b8:3e:f2:28:5f:df:36:f7:13:62:2f:7b:8b:
         89:ef:e4:11:91:62:c4:05:b6:67:65:35:40:10:2b:34:d1:0d:
         96:c8:07:89:69:d5:96:60:19:f3:a8:5e:dc:29:74:01:6f:09:
         60:c2:14:72:77:8c:ff:d0:b4:c6:8e:fb:11:1e:be:38:24:37:
         8c:3c:2f:ca:4e:32:e0:d9:9d:88:8c:85:57:e3:5f:ac:c3:79:
         77:5c:30:ae:73:01:00:8f:92:04:4f:34:83:9e:87:a6:ac:2a:
         30:a9:a7:a0:e8:bb:82:6a:bd:98:c6:bb:25:4d:3e:40:a1:fd:
         b1:6f:fe:e5:2d:84:a4:fa:be:c3:4b:dc:1d:98:81:65:0d:c3:
         2d:12:fc:e4:ef:72:3d:ed:5b:37:1c:54:8b:56:93:0f:78:32:
         2f:3d:44:b9:63:ff:0c:f2:ea:cb:36:8b:92:40:c8:30:4c:b1:
         fd:38:4c:4c:ba:dd:91:96:2f:3f:1d:7c:90:f8:50:9c:0d:83:
         6f:b9:5e:91:9b:82:36:ec:3e:4f:0e:36:0f:5b:e0:45:14:6b:
         02:5a:c8:8d:7a:59:15:ed:9f:6b:9f:4a:6c:4f:ca:78:f4:ab:
         68:73:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:54 2024 by rpki-client on console-ams.rpki-client.org