Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/381ee90f-4bf9-304f-bf4d-fbccf82d7a8d.roa
File:                     381ee90f-4bf9-304f-bf4d-fbccf82d7a8d.roa (raw, json)
Hash identifier:          KVNxsEFww9+THvD/Y8J0CMqqZmyX7yPoGm2GRRkgYAs=
Subject key identifier:   49:45:4C:CB:79:14:EF:C8:DE:AB:9C:3E:CF:28:25:A2:1B:CC:91:F4
Certificate issuer:       /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial:       010D0C9F43285847792BA568C86D35706B650AC0
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/381ee90f-4bf9-304f-bf4d-fbccf82d7a8d.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     57976
IP address blocks:        64.224.0.0/21 maxlen: 24
                          64.224.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:a5:68:c8:6d:35:70:6b:65:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=5915500d-48a3-4a1e-aed5-dbaab716270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e3:59:e8:f0:f7:fc:66:1f:1b:7b:79:32:ab:
                    51:19:b4:ef:22:00:4a:1c:b7:c4:bb:b3:f2:1a:fd:
                    9b:cc:2b:d7:2a:06:0b:b5:ca:f3:d7:11:cd:1e:df:
                    a3:27:d4:af:c2:8a:62:9f:90:f8:12:4b:84:49:15:
                    02:c9:27:1b:ff:d8:13:13:83:27:50:ad:45:c4:ec:
                    2a:9e:d2:18:4a:b4:9b:78:9f:03:c8:22:90:1b:6a:
                    72:1e:bf:73:a8:77:a4:a6:61:9f:50:59:4f:6c:a4:
                    61:68:f6:06:16:00:59:97:4e:76:c2:5d:71:2e:cd:
                    46:11:7b:af:19:5d:91:b7:fe:f7:65:8d:40:72:2c:
                    f8:73:25:ff:58:67:fb:00:d9:15:92:0c:b7:6d:60:
                    0d:05:17:39:05:1f:64:5f:20:f5:a8:87:c1:4b:3f:
                    06:17:99:f2:39:dc:b4:92:d2:92:48:6c:81:db:d3:
                    04:e7:4d:79:1c:81:d5:d9:ea:c0:b3:73:c9:3d:7e:
                    21:85:ea:34:ae:64:c5:e9:63:b6:e7:2c:d2:69:71:
                    b1:4d:cd:25:fc:75:e2:14:13:a5:c2:13:d9:a6:0d:
                    5f:9f:ca:9f:56:05:6c:e9:04:f3:42:3a:e3:30:42:
                    a7:2b:90:5e:1e:85:7e:d2:71:7d:c3:94:f4:77:69:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:45:4C:CB:79:14:EF:C8:DE:AB:9C:3E:CF:28:25:A2:1B:CC:91:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/381ee90f-4bf9-304f-bf4d-fbccf82d7a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl

            X509v3 Authority Key Identifier:
                keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.0.0/21
                  64.224.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:8d:29:38:bb:98:26:2f:33:3d:25:0a:e4:81:83:2a:ac:
         49:9e:d9:fe:df:9e:cb:fe:0d:ea:f9:3a:ca:86:3b:b7:5c:da:
         f3:a5:32:4f:5b:63:61:8f:21:08:a0:3e:ce:56:bc:dd:04:e4:
         31:13:90:e4:e7:bd:97:ce:6b:77:70:bc:34:34:73:81:47:c6:
         7d:13:8f:d3:0c:a6:5b:eb:e5:99:5c:33:e8:d6:95:79:ac:82:
         17:6c:91:16:9a:cc:26:8a:e7:f5:8b:fb:84:d0:b1:56:4b:77:
         b5:d2:ec:16:f9:51:10:96:59:56:6f:3c:e4:60:22:c6:c8:50:
         b4:b8:e8:ee:f3:f4:99:b1:83:77:72:97:b2:c2:38:11:45:4b:
         c4:f7:ce:70:6d:54:89:b2:26:85:be:40:ce:ad:08:51:ab:e4:
         92:42:d3:96:c9:2d:da:c8:af:3c:7c:44:6e:cb:f0:5c:fe:77:
         0b:8c:7e:d1:c0:89:fe:94:0f:4e:b3:e0:85:5a:7d:93:d3:81:
         73:e2:8f:0f:62:b9:81:3b:4c:fc:bb:4f:87:24:bd:bb:62:33:
         fe:1b:80:02:67:9f:2c:4e:cc:a1:84:1c:87:d8:2e:e6:26:b9:
         8a:d5:81:cb:ab:7f:91:7a:fd:07:80:0e:ce:86:09:97:f1:7b:
         74:a3:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:02 2024 by rpki-client on console-ams.rpki-client.org