Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad30d933-dcb6-3550-9120-a65ac5aac5d4.roa
File:                     ad30d933-dcb6-3550-9120-a65ac5aac5d4.roa (raw, json)
Hash identifier:          Jz8AXm/PbnyQp8JTXm08QS2zrW90Ywux57LXNm2vRS8=
Subject key identifier:   BB:95:64:A5:0D:D8:21:A7:52:2C:56:71:77:8E:42:E2:5A:6F:9F:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF89F2A1AF6D34312233380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad30d933-dcb6-3550-9120-a65ac5aac5d4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        75.145.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:9f:2a:1a:f6:d3:43:12:23:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c3dd0a1b-81e3-4376-b4bb-18667fd34fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:90:88:fd:ef:0e:4e:3d:f9:78:2e:84:d9:
                    36:46:fc:f2:fe:8f:83:ce:cd:7a:bc:4b:f3:71:19:
                    c4:17:d5:c5:8c:92:8a:fc:6e:25:e8:ea:3b:d6:2b:
                    4f:8a:91:78:cb:57:84:d0:ee:7c:ae:d1:29:be:ed:
                    36:ce:76:cc:47:b0:6d:e0:62:69:95:0a:46:4d:6d:
                    02:ee:d4:87:f1:9f:be:b6:34:d5:c2:e4:31:45:22:
                    97:41:f3:14:45:e9:91:51:95:54:f2:70:ea:6e:c0:
                    b1:f0:16:c3:55:d7:23:d1:1d:0f:a2:9e:06:4d:3d:
                    6a:a4:78:94:51:26:15:f6:91:55:62:1e:04:aa:81:
                    40:e1:1b:b9:b3:de:27:91:e6:ac:9c:cf:cd:96:d4:
                    c1:fe:04:f2:47:6c:b6:40:93:0b:51:c6:a8:24:de:
                    9d:18:18:aa:b0:24:f4:84:3a:58:17:0e:8e:ee:2a:
                    44:4a:f9:52:56:d9:d7:a8:01:53:ea:d1:2b:bb:6b:
                    d3:0a:03:b0:d9:e7:02:1a:93:7b:dc:63:2c:9d:2c:
                    26:86:06:37:3c:e0:33:e7:17:a7:1a:b3:da:92:b2:
                    0a:2d:34:06:93:7b:70:b9:75:7c:90:34:13:e8:29:
                    8e:60:2b:da:50:e3:c3:87:bc:fe:fb:63:ed:0a:21:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:64:A5:0D:D8:21:A7:52:2C:56:71:77:8E:42:E2:5A:6F:9F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad30d933-dcb6-3550-9120-a65ac5aac5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.145.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:c8:ca:cb:ef:a7:fb:61:79:9e:d5:70:e0:c7:e2:08:bb:
         40:fc:17:06:ba:d5:49:20:9b:b0:3c:58:ed:0d:fd:4e:fd:49:
         d6:67:d2:2a:7b:eb:aa:8b:7c:e1:3a:97:cc:2e:d2:24:de:7a:
         20:ae:fd:1a:12:0e:71:39:40:3a:59:79:1e:40:d9:93:2b:03:
         53:03:91:b9:e2:9c:7f:5c:43:df:20:5b:d3:56:44:d8:e2:91:
         6e:4e:d1:99:b3:0e:b1:a9:c5:1a:b0:e6:f6:72:b2:63:0d:8f:
         66:fc:13:33:7f:73:b7:2f:ca:7e:ab:72:b2:a8:00:f2:7f:c2:
         c1:43:b8:59:a4:84:9d:a9:04:b3:d9:f1:09:a1:43:22:ad:65:
         8e:f6:43:65:23:7d:0e:2d:34:8b:88:92:68:4f:7a:b1:30:86:
         1d:1c:f6:17:8a:5b:25:0b:36:56:51:7e:3e:ea:a1:8e:ff:ba:
         b5:97:a2:4d:26:09:8e:16:3d:6a:9a:c0:2c:6d:ad:0b:d6:9f:
         73:da:4a:d7:4d:47:43:e6:89:fe:57:e4:02:ee:3a:b8:d7:43:
         f6:70:99:d8:5f:e5:6a:25:39:48:5d:2a:23:b0:f2:e4:89:fc:
         f0:ba:33:b0:66:2a:ea:34:d6:9a:b6:43:6c:54:d6:6d:0a:be:
         64:c4:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:43:09 2024 by rpki-client on console-fra.rpki-client.org