Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf9566f-20e0-3d6b-b86d-ed1287e9b5d2.roa
File:                     ccf9566f-20e0-3d6b-b86d-ed1287e9b5d2.roa (raw, json)
Hash identifier:          F8QCBi27GaZM7l3fZeYdo3GOvAySIlqFGqLrBaBN54g=
Subject key identifier:   95:17:38:68:76:6A:09:BC:99:AB:8E:E4:3A:15:09:D5:FC:8E:83:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E6A0D10F2AE375A7F79E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf9566f-20e0-3d6b-b86d-ed1287e9b5d2.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.140.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:6a:0d:10:f2:ae:37:5a:7f:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8a8016ee-69a6-40ed-b285-d598235d0e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:2f:9a:ea:8d:aa:b3:55:f7:b5:bc:fa:74:
                    0c:07:72:fd:17:44:d8:cc:02:3b:6f:7f:0b:ae:96:
                    36:af:28:30:ce:19:cd:cf:1a:11:af:0a:ec:c8:79:
                    7f:e2:5b:c9:01:9d:ed:b9:a1:78:52:b4:d6:1c:91:
                    9f:2b:62:ff:c8:cc:a7:45:a8:3f:0f:c1:76:eb:f2:
                    00:a9:93:40:2e:04:7b:a6:37:8e:8b:4f:32:e3:ad:
                    97:5f:09:f2:7f:5c:1b:de:27:4e:03:d9:8f:74:ed:
                    5d:b8:56:c9:37:59:45:82:e3:3f:9f:d5:28:ac:c8:
                    61:22:16:89:69:d5:ef:6e:c9:a1:e7:94:10:4b:06:
                    b8:15:33:a8:c7:fd:69:6c:43:bc:9a:e1:f3:c7:75:
                    f9:fd:ca:2a:cd:5a:3f:7d:21:fb:22:a1:28:00:14:
                    69:24:fd:d9:b9:8b:43:9a:f9:c7:b8:a7:ab:a4:50:
                    35:0e:d2:0b:e1:9a:d8:43:9e:13:d8:71:f3:31:c8:
                    bc:04:92:bf:08:df:1d:32:07:2d:b7:3a:4b:ce:62:
                    17:3d:ee:00:bc:c1:60:d0:a8:20:8c:eb:db:95:57:
                    c6:3d:ec:12:dd:18:3d:ac:a3:db:f6:4a:0a:16:d6:
                    b3:99:ce:91:9d:0a:0a:8f:0f:03:a5:85:69:0a:ae:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:38:68:76:6A:09:BC:99:AB:8E:E4:3A:15:09:D5:FC:8E:83:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf9566f-20e0-3d6b-b86d-ed1287e9b5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.140.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:a4:f4:09:20:80:44:59:10:a3:e1:f1:63:8e:5a:2c:ad:
         9c:70:33:60:c2:0d:cf:92:d9:43:8d:8e:c9:f5:54:f1:15:4a:
         e2:92:ce:9a:83:89:04:1f:d4:15:54:dd:72:de:be:26:f2:21:
         74:89:fe:68:84:d7:f3:fc:ed:f9:dd:b5:db:0a:ba:a0:7f:b0:
         eb:4b:f3:2f:55:13:72:82:f4:a5:82:04:c6:3d:13:df:cc:fe:
         95:f1:9d:69:00:61:0b:23:bb:ee:60:7f:a3:e3:3c:81:5b:74:
         26:9b:fb:75:a3:b0:cf:db:7f:c5:fc:34:cc:52:20:90:fe:1e:
         f7:cd:57:45:14:0f:be:94:24:21:e4:8e:b9:5f:a1:b7:e9:fc:
         27:b6:74:c6:c0:62:c7:70:74:fd:f8:36:2a:fe:eb:75:b5:ee:
         ea:8f:56:09:29:03:6a:0d:5c:ca:2d:36:43:5b:e6:6c:68:15:
         2b:27:a8:eb:c3:9d:13:53:5a:18:29:eb:52:06:92:3c:35:63:
         25:ac:8e:de:a8:32:bb:73:de:cd:5e:0b:d7:b1:5c:32:50:c8:
         81:51:9f:aa:2f:8f:a8:08:a2:1a:b8:52:77:3e:e1:e2:2d:7d:
         95:cb:d8:21:5a:f7:2d:c6:72:0f:72:ff:11:81:db:91:96:df:
         e1:03:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:45:50 2024 by rpki-client on console-fra.rpki-client.org