Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7ec5ea9-1d51-3fc7-9a4e-bb64d1246d40.roa
File:                     c7ec5ea9-1d51-3fc7-9a4e-bb64d1246d40.roa (raw, json)
Hash identifier:          0VX0AFwifvLNzyrj4F9D69fl+n49H1k/OLNb3eTVB4g=
Subject key identifier:   18:D4:73:D8:1C:C0:2C:63:8A:83:3A:28:9F:8D:AB:32:24:8D:E3:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5E273949EE5D1A7154B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7ec5ea9-1d51-3fc7-9a4e-bb64d1246d40.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        71.56.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:e2:73:94:9e:e5:d1:a7:15:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=ec1b3c82-bf03-42c7-8cb8-4538b8b6259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:40:cd:b8:31:77:eb:a5:12:ab:53:36:a9:
                    5d:ca:d6:42:51:ba:8b:5a:e5:db:df:83:f8:74:0a:
                    be:ab:bf:db:27:b9:c7:b8:53:a8:22:1f:9e:02:35:
                    0e:2c:43:c3:9c:bf:cf:5d:2a:91:7a:aa:ff:7b:c1:
                    ba:2e:b1:6f:c6:48:56:ca:a5:b0:7f:96:3b:d8:4f:
                    8f:a9:15:b0:57:62:23:b3:05:ed:f8:41:28:29:c0:
                    23:4c:c0:18:4d:50:ba:ca:7b:59:33:3a:35:cc:b4:
                    91:be:7f:b3:5f:08:c9:ec:bf:04:97:53:92:70:5a:
                    8d:cc:38:9c:38:17:52:9c:6f:f3:76:a8:82:f6:52:
                    c6:79:26:bf:ef:bf:8d:72:62:ee:3b:83:62:b2:ce:
                    70:c9:a5:f4:59:c0:f7:bc:61:05:4e:9b:05:e2:e1:
                    c3:2e:5f:01:fd:e7:66:f3:9e:c2:77:f8:14:f1:dd:
                    fb:84:33:5e:f4:d2:c6:73:cf:fa:38:e3:ec:c5:83:
                    12:09:19:dc:eb:f1:bf:19:3b:ad:aa:a7:6d:a2:79:
                    5c:8e:c3:ee:f1:22:cf:06:3a:a5:73:89:9f:58:76:
                    d1:f6:99:e3:b3:b6:1f:90:02:7b:5f:f1:47:1d:78:
                    6e:22:d2:ae:38:a0:c4:9a:53:8c:21:77:fb:2b:4c:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D4:73:D8:1C:C0:2C:63:8A:83:3A:28:9F:8D:AB:32:24:8D:E3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7ec5ea9-1d51-3fc7-9a4e-bb64d1246d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:00:eb:e5:7f:19:e5:d5:f7:cd:56:bf:3d:0d:18:b8:d5:08:
         92:c9:0e:22:30:2c:63:0e:c5:73:4a:db:28:83:53:24:64:c2:
         f3:dd:34:3c:d6:64:67:1b:ac:8a:01:c6:29:f8:57:60:3c:f3:
         0e:ec:6b:59:0f:d5:9e:fd:ad:e0:27:50:c8:50:85:65:00:9e:
         8f:4e:95:55:42:27:c4:5a:0a:33:e4:cc:d3:6a:54:13:7e:66:
         59:13:b3:b3:8b:a7:fc:de:74:8f:8d:fd:3c:ad:7e:4f:05:70:
         45:91:bb:3b:e7:8c:f0:be:46:9a:48:b8:d2:da:c1:be:fe:b1:
         7b:55:11:c8:74:a2:66:31:44:10:b0:0d:78:62:fd:0a:e5:a5:
         48:7b:3b:18:7b:c8:cc:ef:23:3f:b3:1a:c1:c4:8e:3b:51:d8:
         16:63:d8:da:a5:7c:65:84:0e:84:8a:47:02:81:5c:7a:30:2c:
         03:98:cb:93:8c:c8:5a:90:3a:6f:6f:b3:e1:2f:58:39:43:e3:
         af:34:73:f4:0e:aa:cb:40:1c:6a:e0:c3:14:70:f2:dd:b8:54:
         f9:e7:53:b3:c5:83:48:39:f0:d3:13:72:36:5a:85:aa:30:72:
         d2:81:7d:62:8d:fb:28:7a:3e:d7:c0:ca:9b:bc:a1:b7:02:f5:
         b4:6a:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:18:20 2024 by rpki-client on console-ams.rpki-client.org