Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0e94d6-9031-3acc-8e90-7859c40c356b.roa
File:                     ad0e94d6-9031-3acc-8e90-7859c40c356b.roa (raw, json)
Hash identifier:          jC+fWZ2rrnqLXaGanK4h+L4X/PrVf1f/ATNavrsCNYw=
Subject key identifier:   2B:45:59:FD:E9:BD:A6:EB:F8:42:5C:69:8E:A3:EB:CF:1E:25:6B:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C650FEC8F590E46B6202C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0e94d6-9031-3acc-8e90-7859c40c356b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        174.169.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:50:fe:c8:f5:90:e4:6b:62:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=46eafff2-15df-4e3e-9edc-06ef5b98172a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:1a:6f:be:10:18:e1:3b:84:26:0d:61:86:
                    26:e4:f3:0a:ff:82:67:23:35:a0:2e:b9:89:33:fa:
                    7b:ad:a8:d1:49:9d:43:d8:e6:b2:47:93:59:ed:f0:
                    27:41:e6:bd:5a:11:58:c4:99:64:c9:32:84:b3:eb:
                    01:17:14:9e:9f:29:71:c1:1a:b0:d2:3b:0d:71:7b:
                    21:32:82:72:de:02:ba:73:d7:63:02:36:32:2e:13:
                    5d:a9:41:74:34:3b:e8:bb:f8:cb:82:59:25:87:ed:
                    b3:0b:0c:02:24:59:6a:a2:ba:e8:8e:04:b2:e9:68:
                    1b:54:61:1b:af:99:b5:d2:1e:33:26:be:f3:37:5e:
                    2b:fa:53:e7:5e:5c:32:bb:f5:49:29:0d:03:54:dd:
                    4d:72:91:9d:91:41:29:50:6c:32:88:d4:36:f6:c8:
                    06:24:6f:9d:71:b8:df:75:71:f2:b3:f7:df:fb:b2:
                    c0:b3:21:9e:ab:a7:ec:9b:18:95:da:49:c0:73:9a:
                    cf:f6:49:8b:9a:b3:95:8d:4a:05:69:e9:25:1e:05:
                    03:5b:b2:57:f3:77:bb:5b:dd:b0:4a:57:76:dc:6b:
                    42:f2:13:24:18:1a:4e:af:53:ba:e5:c2:cf:23:e2:
                    67:d8:9f:bc:bc:54:50:11:78:ce:6a:20:ec:ce:68:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:59:FD:E9:BD:A6:EB:F8:42:5C:69:8E:A3:EB:CF:1E:25:6B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad0e94d6-9031-3acc-8e90-7859c40c356b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.169.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:c3:20:c5:89:0d:97:a8:57:ec:8f:e2:95:80:e2:4d:b2:
         96:c1:fb:49:7b:c0:9a:77:3d:75:c1:49:40:89:7f:04:66:c8:
         c7:7b:41:cd:a7:63:33:e9:b3:14:83:5b:96:6b:f4:d9:b5:cd:
         3f:2c:6c:19:16:02:d3:b3:b0:4b:7a:0d:74:e6:6a:a9:95:6b:
         1e:36:74:69:da:3c:68:09:e0:dd:7c:4e:6a:bb:59:4c:36:00:
         f7:b5:88:66:38:0e:b2:6a:87:4a:05:fb:b7:97:f6:b4:0c:cd:
         70:1a:21:52:7a:b1:c8:03:62:5b:da:cd:87:3a:88:08:ba:cc:
         4f:cf:ad:a2:11:04:e0:66:08:a5:90:d0:89:23:31:be:fa:e4:
         c8:d0:46:ed:0a:ab:96:7e:9a:c0:76:5c:44:6a:41:9a:e1:bc:
         a6:60:05:02:ad:c8:3a:fb:e1:2e:02:c8:52:bd:0b:64:14:a0:
         bb:b8:2c:10:1f:48:e0:03:49:6a:23:7f:13:94:7f:1c:2a:2b:
         d6:58:e0:19:79:d2:4c:81:ae:cc:05:27:7c:ba:d0:ae:21:31:
         53:22:9d:67:1d:8d:15:68:b6:ad:13:ce:af:b9:90:cb:90:9a:
         fc:91:2a:80:4a:ce:fe:34:b5:53:2a:0d:7b:2a:5a:b2:55:93:
         e4:a1:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:05:47 2024 by rpki-client on console-fra.rpki-client.org