Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a250d770-a7d0-3851-ae4a-9d43195bcf82.roa
File:                     a250d770-a7d0-3851-ae4a-9d43195bcf82.roa (raw, json)
Hash identifier:          chy+raSgsStezFWfAry0vN6ryRYvaeoXg5+HT+Zd7CQ=
Subject key identifier:   57:E0:4D:1D:04:E2:BB:1C:DD:6C:9A:DE:FE:13:35:EB:C4:EF:5B:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E697F136FAE63FE6B3F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a250d770-a7d0-3851-ae4a-9d43195bcf82.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.140.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:69:7f:13:6f:ae:63:fe:6b:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c8215ae9-0b10-4155-9db6-c0b1bd723bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:f7:56:12:72:40:77:88:ab:ff:2c:19:e8:
                    03:e5:27:0e:83:20:e9:09:e4:8a:11:d7:fb:96:46:
                    46:49:af:71:58:c7:86:a0:2e:fb:bb:0c:5b:e1:81:
                    37:36:df:c2:a3:f2:24:73:c3:1e:27:69:22:0a:90:
                    d8:77:16:65:e9:cb:c1:00:9d:b1:21:70:23:64:b9:
                    c4:eb:d3:59:11:fb:36:ea:77:33:45:6f:1b:ae:c8:
                    68:7b:09:4d:7e:6a:7d:9a:c7:ce:b9:b4:12:d6:bc:
                    9e:87:a6:d5:7a:e3:74:8d:43:b5:7e:fc:bb:af:13:
                    8c:27:e4:1a:b3:b6:cf:92:bc:52:fe:74:23:a1:27:
                    3e:50:5e:18:20:93:1e:3a:7c:dd:b8:b1:43:d1:f0:
                    a9:90:44:0b:bc:f5:29:53:22:fc:36:09:44:65:d6:
                    1a:57:70:24:8e:8a:a4:86:6c:77:f7:01:cc:f0:a2:
                    9f:99:a0:85:01:39:76:ac:98:f2:3f:a0:ba:09:0c:
                    27:16:e3:01:6c:af:66:2c:4b:5c:b2:98:91:ac:53:
                    b5:32:55:80:a3:72:85:44:13:95:61:ad:21:c9:90:
                    85:ac:a2:00:49:04:fd:7d:74:9c:50:bc:3d:61:d6:
                    f5:51:c2:8c:3d:68:89:c9:7f:e3:e7:9e:bc:85:74:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:4D:1D:04:E2:BB:1C:DD:6C:9A:DE:FE:13:35:EB:C4:EF:5B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a250d770-a7d0-3851-ae4a-9d43195bcf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.140.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:63:9a:7d:7b:d5:f6:9d:b9:e5:44:e0:a9:3c:ee:07:2f:
         73:5e:cc:91:80:5b:c3:d9:16:fe:f4:6b:46:0a:61:d1:e8:99:
         aa:56:18:61:d9:36:7f:57:a2:10:b7:92:7f:d8:17:82:6b:2b:
         f2:5b:ec:b0:9a:69:3a:3d:cc:34:21:81:82:0a:78:42:9d:2b:
         cf:fb:fa:47:fd:e5:cc:27:d7:cf:13:9f:92:f4:c3:32:8c:16:
         72:38:61:1b:eb:75:c0:1c:99:2c:31:07:63:f3:b7:a0:d4:20:
         c5:fd:8d:00:0a:df:65:21:21:be:e6:33:39:fd:98:57:ab:2f:
         4d:c2:47:57:98:38:1f:71:93:f1:fb:68:0a:c4:35:47:60:04:
         17:b0:6d:50:cc:85:7a:52:f8:cb:29:f1:bf:8e:95:f8:b2:c6:
         e4:19:db:37:b6:dd:ca:c4:71:91:c6:78:08:ea:b4:3b:76:2a:
         44:7b:83:e5:fd:f1:dc:4c:8d:3a:33:3f:2e:ae:e2:c6:15:6a:
         f7:21:d8:c8:6e:65:16:44:5a:70:5a:86:0c:ea:49:45:92:34:
         13:f2:91:c0:8b:43:2d:66:19:8d:9a:21:7e:53:79:76:c9:f1:
         27:46:a0:b9:c5:75:50:f2:05:b2:2e:71:31:7a:b5:65:a4:4e:
         0b:cc:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:09:05 2024 by rpki-client on console-ams.rpki-client.org