Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f860d98-84e9-3ada-a315-b1108e777158.roa
File:                     9f860d98-84e9-3ada-a315-b1108e777158.roa (raw, json)
Hash identifier:          zUTvf/U6MIyyN9wZmDzZgSKRF8VVUmK7DwCx9BRvFlI=
Subject key identifier:   4A:57:E7:45:DA:E1:C5:37:09:3A:77:A5:31:E5:75:4D:AC:FA:CD:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7A1DD139FD60AA6BF4400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f860d98-84e9-3ada-a315-b1108e777158.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        96.67.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:a1:dd:13:9f:d6:0a:a6:bf:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c7b82866-706e-4cdb-85c5-31457b268322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:0a:c1:c9:9d:2d:ff:da:44:52:98:41:15:
                    e7:95:49:1d:73:a6:07:83:f3:b4:15:ee:c3:ad:28:
                    33:14:7a:09:dc:a5:4d:00:1c:c6:55:12:85:d5:82:
                    66:6f:dd:4c:99:f5:e2:42:7c:c4:55:2d:1d:54:64:
                    d7:29:04:70:85:3d:df:5c:77:f3:a8:5f:3f:56:82:
                    67:78:4a:64:c7:59:09:16:35:cc:4e:96:14:a5:ca:
                    53:c1:7d:c9:f2:12:11:fe:84:15:1e:15:c2:af:7f:
                    8b:89:ca:af:49:f5:8b:5f:bc:8e:df:ea:bb:d9:65:
                    b2:9f:c3:08:98:e0:17:ab:31:f5:fb:1c:b4:d6:b1:
                    85:a4:ae:e4:fc:06:b2:74:00:fd:fc:92:07:d0:6f:
                    4d:c7:7f:31:d7:e6:3c:15:5c:1f:b5:cf:2b:1c:06:
                    5b:37:4d:f3:a7:8d:31:00:38:63:08:69:98:57:20:
                    f9:ac:bf:1b:e1:9e:a8:32:04:f3:ac:38:fa:23:dc:
                    2f:55:bb:56:62:2f:d5:18:13:b9:3f:2e:ab:dd:28:
                    40:d4:d2:28:15:26:a0:b4:0e:2b:17:3f:08:e6:68:
                    47:6f:c4:33:68:af:cb:b2:fd:18:85:58:0a:68:fb:
                    29:c0:ce:33:c1:1c:52:84:a8:b7:90:ff:a5:9d:dd:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:E7:45:DA:E1:C5:37:09:3A:77:A5:31:E5:75:4D:AC:FA:CD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f860d98-84e9-3ada-a315-b1108e777158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.67.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:1f:37:ce:0c:fa:3e:96:7d:22:66:f0:9c:84:26:c3:4f:a9:
         e7:2a:c1:6a:51:8f:db:40:6d:89:67:b4:0c:3e:d0:f0:e4:c1:
         b7:7e:be:00:43:f2:e3:75:c2:8f:ea:c5:1c:57:74:ff:25:38:
         f4:4e:c5:f6:71:7a:df:b7:c5:29:47:15:c0:44:e1:d2:82:38:
         c3:46:19:0e:c9:a2:70:ef:42:40:86:71:2c:ab:bc:dd:f5:c3:
         67:51:ac:a8:f8:45:e5:14:de:56:af:8c:b9:30:74:de:ae:e7:
         3c:ae:0e:86:0f:4f:a7:bb:c2:6a:c3:0b:eb:a2:96:39:f4:97:
         1d:67:77:0b:b2:c5:cc:31:85:ee:fb:99:70:8a:98:70:43:fe:
         9f:c1:9a:31:ec:82:cc:04:b1:e4:cf:60:75:64:e1:b0:3b:73:
         a1:68:01:33:35:cc:f1:e4:96:1c:51:5f:ad:14:f8:16:48:bc:
         64:1d:27:8c:b9:d5:55:08:66:8f:e0:4b:22:1c:42:0a:8b:49:
         a5:47:d6:02:af:fd:35:c6:a6:3f:65:da:70:ab:f5:3e:17:55:
         6a:56:84:cf:50:83:d4:45:09:7e:e7:ad:92:ef:e9:10:d4:32:
         88:35:95:d0:fa:e0:95:8b:36:52:20:16:20:1f:a0:d3:df:cb:
         61:f2:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:06:48 2024 by rpki-client on console-ams.rpki-client.org