Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa
File:                     d8df04e1-c964-33d8-95e7-867bde7d403e.roa (raw, json)
Hash identifier:          g5cc23xlMIv0sJytshJuYyyRtOElW8MWhGQ6uBBjgMQ=
Subject key identifier:   06:A6:36:34:BB:BF:D6:EF:05:E6:38:46:C1:62:F5:84:87:EF:CB:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5640EA6331E4DB2D33D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.126.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:64:0e:a6:33:1e:4d:b2:d3:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=91259264-9db9-4b62-b75c-92257bea3dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:03:b1:f5:b5:dc:1c:78:a3:8a:8f:1e:c9:
                    ef:34:05:ae:05:b8:4b:93:78:af:f7:24:af:96:81:
                    20:5f:b2:6a:b8:ae:d9:c2:7b:73:8a:f7:8b:74:55:
                    15:3f:a0:cd:63:50:b1:99:1a:c5:a8:03:c4:98:17:
                    1f:8e:27:4d:e1:eb:09:82:25:4e:8e:d6:8e:9c:07:
                    91:16:3f:5a:fc:4a:50:71:a5:82:1c:c1:1e:41:b0:
                    f7:4c:41:78:ba:65:e2:11:c5:12:69:78:9f:dc:a8:
                    49:c4:6b:c1:1b:02:6c:42:41:af:0e:68:93:84:65:
                    09:44:b2:b4:00:38:03:23:a3:9d:23:9f:ea:1e:d0:
                    17:27:03:e4:a6:59:19:cd:04:5a:48:2a:c9:0e:3c:
                    aa:bf:38:33:70:5f:b0:ce:6e:ce:55:f4:be:28:b8:
                    22:8e:3c:a6:84:23:1f:d6:4b:2f:9a:c5:4d:22:c7:
                    6d:58:78:bb:4e:ea:95:ff:98:9e:72:e1:75:62:fd:
                    ab:8b:61:6f:5b:14:2f:27:07:80:44:34:a3:cf:de:
                    92:44:5f:d6:10:91:79:9f:c9:70:59:57:a4:5d:63:
                    48:66:55:e8:60:0c:d9:78:9d:ae:71:3f:e0:e5:a4:
                    f5:84:63:63:a6:75:cb:2d:ad:ae:3e:4a:84:db:91:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:36:34:BB:BF:D6:EF:05:E6:38:46:C1:62:F5:84:87:EF:CB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.126.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:d4:e6:a4:36:d7:fb:6a:b3:7c:7b:8e:b3:86:2c:8c:3d:01:
         1a:5f:b4:28:9e:08:2f:1a:c1:55:b4:23:b3:00:c7:73:69:1d:
         e2:10:0f:c6:7f:ed:82:67:10:97:da:ef:e0:88:e3:8e:4d:b7:
         30:a1:3b:15:d6:31:d1:e4:46:47:c5:f2:0e:6e:c2:15:0f:0e:
         ac:e4:9a:d5:8f:75:cd:f6:6f:1f:1e:ab:95:26:ce:59:07:9f:
         82:96:13:09:ca:ea:31:6b:5a:70:13:8b:ea:0c:13:91:a3:54:
         08:5b:a3:4a:32:55:b7:79:fe:19:fa:e0:6c:ec:a1:71:d6:51:
         54:20:16:30:84:b7:7e:91:5d:4d:1f:5b:96:d6:be:83:27:6e:
         6c:c3:08:9d:2d:69:b8:c5:92:d6:67:f1:ba:4b:71:d5:dd:c7:
         7c:02:6d:70:6d:d4:55:58:39:88:de:6a:3e:1f:05:59:41:47:
         81:2c:b9:c7:a9:e9:be:30:cb:1c:c0:94:22:a2:24:98:a2:3b:
         e7:e6:29:8c:a6:81:f6:73:78:56:fc:27:f1:2e:c6:0d:28:4e:
         07:dc:ab:c4:1f:74:54:62:de:53:28:5d:ca:48:06:6f:6c:9e:
         e9:f6:26:ac:2a:c6:b9:0c:4c:18:a3:47:dc:ff:d2:3f:fe:59:
         99:e0:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:20:31 2024 by rpki-client on console-ams.rpki-client.org