Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9cf41e3-a1fb-3161-b590-4aba49b71fd4.roa
File:                     b9cf41e3-a1fb-3161-b590-4aba49b71fd4.roa (raw, json)
Hash identifier:          /8F9MwyzjswDmzi076eeM08EIbq+tPbq30vnN9oUUCw=
Subject key identifier:   71:75:5F:36:9D:1A:94:57:11:37:BA:A1:7B:1A:A9:76:23:3A:F4:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB5EF16252840714B2CBD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9cf41e3-a1fb-3161-b590-4aba49b71fd4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        76.17.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:5e:f1:62:52:84:07:14:b2:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=241e1680-fce8-496a-9709-a5d12550ad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:16:da:ae:f2:f3:bb:dd:e0:c5:0e:24:39:
                    a9:86:4f:84:73:f5:dd:51:95:5b:ec:95:c7:80:68:
                    eb:0c:35:78:a6:e0:da:45:d9:0c:54:f4:d5:3a:62:
                    b0:e5:74:56:86:da:b1:fc:f1:ae:16:1b:24:b4:13:
                    b8:8c:ba:df:c1:8d:e5:a2:db:00:3d:83:1d:30:82:
                    f8:8f:73:2e:b9:2e:b5:6b:a7:a0:81:d7:8f:56:41:
                    9f:e6:6c:25:ac:94:cc:80:05:e4:d2:e7:ea:d2:01:
                    cc:03:86:17:8c:f7:7e:c9:bd:c5:de:cd:44:46:2b:
                    cb:2e:cc:12:4d:a0:a1:2a:ba:7c:b2:47:58:70:f5:
                    4c:e0:c1:3a:d5:25:50:be:3a:34:f0:80:aa:da:bc:
                    45:82:49:e2:6e:ea:3c:94:66:27:63:65:0a:4a:5c:
                    08:e8:c3:15:a7:00:ad:de:46:2f:7c:02:a6:32:a7:
                    7e:79:a9:fa:22:98:56:a3:cc:7a:d3:94:02:f4:d3:
                    7c:64:7b:a9:61:65:ef:98:d8:f8:29:2b:43:62:1b:
                    0a:9c:d6:5a:01:8b:f9:d2:34:6f:e9:00:93:2d:17:
                    c7:e9:ec:2e:21:07:ac:81:93:d4:d2:79:dd:4a:31:
                    45:30:10:6b:c6:50:a5:a2:73:af:dc:79:cd:15:ca:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:75:5F:36:9D:1A:94:57:11:37:BA:A1:7B:1A:A9:76:23:3A:F4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9cf41e3-a1fb-3161-b590-4aba49b71fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.17.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:46:da:be:a0:33:42:0e:f5:79:06:a7:8d:54:c6:e8:63:6c:
         07:cd:e2:86:e5:f7:f3:f5:88:3c:32:88:26:9f:3c:8a:4f:dd:
         fd:a7:dd:ab:9b:c4:b3:12:24:e1:2c:44:79:31:9a:1f:8b:2a:
         1c:8a:4e:7a:27:ca:1a:d1:58:89:09:b7:a5:2c:4f:74:db:dd:
         87:62:6e:ae:0c:9d:c6:5b:13:0c:5c:3f:15:48:0b:9f:09:d4:
         94:9f:a0:9d:62:a1:e7:fa:c6:44:2b:3c:5c:8e:3e:a1:5d:82:
         0c:ca:00:0d:de:eb:81:88:fb:ad:ab:a2:2d:56:bf:75:5d:20:
         6b:6a:9a:68:89:6e:f8:fd:2b:2d:55:38:c0:80:ba:32:3f:5d:
         bd:af:90:61:da:74:93:db:78:39:a5:57:b2:86:e9:58:39:6c:
         97:5c:d3:28:57:9e:64:dd:76:c3:d3:7c:90:1a:d7:db:47:84:
         7a:75:0f:b6:57:a0:db:82:5d:f3:10:e6:0f:1e:e5:a0:cb:66:
         ef:b4:44:7c:a5:17:21:d7:30:27:cf:f0:09:ec:08:77:71:e1:
         85:1e:61:20:af:c6:04:57:5f:7d:4f:dc:54:4c:a5:52:47:28:
         f1:e8:dc:40:6f:33:da:b8:e8:b1:1a:c8:b5:81:68:f3:b3:1a:
         c8:ab:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:16:11 2024 by rpki-client on console-ams.rpki-client.org