Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74955ad-654b-3fa0-b66c-a640c5eebc05.roa
File:                     f74955ad-654b-3fa0-b66c-a640c5eebc05.roa (raw, json)
Hash identifier:          +9HcrHegK1oXeps1c7zjFHf3SS0RXIjvNmPO2Bnw4Uc=
Subject key identifier:   33:C3:9B:6F:D4:0B:AD:B4:B5:E0:10:71:37:DD:E2:0E:67:3A:10:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CA03D8F2E1B0291436500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74955ad-654b-3fa0-b66c-a640c5eebc05.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        76.16.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:a0:3d:8f:2e:1b:02:91:43:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b2623625-169d-4b12-b059-141b8d51a8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:f1:14:2b:53:6b:dc:95:1e:94:c3:67:9d:
                    68:9a:dc:47:7f:37:f3:6e:df:6f:c6:ff:d6:88:e5:
                    a9:53:4b:b0:e3:c9:41:a0:e4:4b:31:d3:31:32:be:
                    92:fc:7f:d5:94:17:1f:83:34:b0:94:98:e8:03:1d:
                    1f:6e:c9:3b:88:c2:4e:36:d8:ec:c7:b7:e4:c7:1e:
                    87:50:d4:0b:41:c5:2b:bf:0d:e2:3a:8c:f3:2d:61:
                    5f:21:47:d3:6f:2b:68:63:3a:08:14:03:9a:70:65:
                    38:57:96:00:6f:f4:e4:c5:d6:b6:6d:69:06:76:b7:
                    20:89:63:79:32:c0:1f:cd:66:b0:d1:ad:f4:05:c4:
                    22:aa:15:8b:38:e9:5c:ec:50:bf:4e:3d:86:1a:2e:
                    1b:37:1c:41:a7:f5:84:d3:df:1c:e7:0e:f8:57:b8:
                    f0:cd:2b:96:f3:96:8b:b8:ff:fb:b9:9b:da:6c:43:
                    10:b6:c9:5b:3a:d8:8a:3d:08:92:58:50:f2:a4:7c:
                    87:a6:40:ac:1b:b3:a3:ae:8f:cd:57:1f:ce:6e:9f:
                    49:25:e1:36:b5:bc:d7:ff:5c:99:d7:35:89:64:37:
                    83:1b:18:89:84:41:9e:24:bf:72:97:98:d4:da:08:
                    e4:e9:4e:ec:18:bb:a3:52:51:bd:12:cc:8e:0e:01:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:9B:6F:D4:0B:AD:B4:B5:E0:10:71:37:DD:E2:0E:67:3A:10:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74955ad-654b-3fa0-b66c-a640c5eebc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.16.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ae:bd:92:b1:25:a1:6e:f4:9d:d0:87:ca:78:f3:cd:07:a4:
         2d:bd:b4:09:63:a1:8b:81:33:0b:13:42:34:1a:40:65:40:41:
         b4:da:49:8f:2d:d5:5e:ac:78:e2:8f:ec:fa:c0:c0:21:3c:48:
         16:18:e0:b5:e0:99:25:1c:f2:9c:c7:7a:19:79:8d:31:af:18:
         51:72:da:e3:96:15:37:ef:57:ce:86:48:70:c1:cc:40:3a:05:
         e8:ce:30:ee:79:e8:7a:e4:1a:cd:f7:0e:fa:95:50:0b:df:22:
         d8:c5:88:57:45:21:ea:8d:60:af:da:1f:18:a3:67:b1:96:4a:
         98:f5:56:46:17:f1:64:ae:4b:ef:11:34:2c:29:71:f5:7f:8b:
         e9:64:b2:1d:18:e0:db:f1:da:f3:76:80:8c:f0:2a:4c:6b:b7:
         9d:0b:7c:77:0a:fe:71:75:13:0e:b1:f4:31:96:1f:a7:65:6f:
         41:29:cc:5b:d1:e0:0d:f4:d9:67:3d:68:83:b0:be:ba:65:2e:
         c8:2d:d7:10:b2:74:3e:cd:c2:f5:53:14:66:5e:7c:bb:f3:b3:
         e0:0c:27:5a:b7:8b:ec:75:c5:f9:a5:98:21:1c:58:f1:a5:68:
         c5:28:15:30:22:d4:72:3d:f2:3a:68:fe:6a:15:08:42:e6:60:
         ff:fc:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:38:26 2024 by rpki-client on console-fra.rpki-client.org