Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
File:                     4d5e8188-243c-3e1d-8dd9-99991af6feec.roa (raw, json)
Hash identifier:          8qIeYpLIj907ryGUANr/bUO5b0b/uYaK2Bu38e+Je8w=
Subject key identifier:   AF:60:18:FD:BC:9B:7E:13:C9:D2:44:F0:97:EF:B2:CB:AF:D8:54:BB
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F43285847766102285817FEB7EAEDB980
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     393474
IP address blocks:        64.90.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:02:28:58:17:fe:b7:ea:ed:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=ba99b2c4-e922-4011-b59a-b5c170b27508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:65:39:06:98:b7:ec:99:70:af:44:d0:3c:
                    1b:76:0b:05:0c:98:82:2a:bf:1e:29:e6:6a:4c:a2:
                    c7:96:93:58:e2:0f:e6:25:24:a3:8e:bf:35:cb:36:
                    e0:39:1e:21:80:c7:55:cd:28:2c:94:c1:93:11:3a:
                    d4:f7:2c:20:e4:01:d6:ba:5b:14:ce:82:4c:eb:6d:
                    33:db:22:47:32:48:a0:dd:88:d8:4e:b7:89:fd:d8:
                    ce:07:4f:df:00:d8:5e:d8:e0:ec:2c:2d:1c:49:11:
                    e7:f0:47:80:7a:9c:b9:21:ad:2e:1f:e3:77:cb:ab:
                    d0:ae:95:e5:8f:16:86:cd:04:2b:a0:db:82:3b:ba:
                    1a:42:19:8c:c6:30:41:23:79:ea:49:0b:a9:4e:66:
                    b9:7d:56:e0:23:b6:e8:e0:b3:fd:d5:04:8d:1e:d7:
                    65:e8:a2:e8:dd:b6:a7:3d:c7:10:1a:5c:0e:61:ba:
                    b8:1d:3b:bd:77:7d:33:be:d3:38:9b:e0:ca:af:c9:
                    aa:bf:fd:01:c3:c9:dd:7d:e5:db:2b:b1:c4:1a:a9:
                    3e:e9:e1:4d:93:52:d5:38:ef:8d:36:26:7b:2f:b4:
                    a9:ec:2b:30:bc:cd:66:a5:d4:79:06:37:bc:20:80:
                    a8:d2:fa:17:f3:58:e5:6a:43:3e:d1:99:19:13:ed:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:18:FD:BC:9B:7E:13:C9:D2:44:F0:97:EF:B2:CB:AF:D8:54:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:59:e6:17:d7:40:42:42:c0:63:df:c9:0a:37:8d:7e:de:
         1b:4a:75:c7:31:eb:1d:1d:e7:0d:64:ff:12:23:5e:c0:21:5d:
         e8:a7:06:fb:ff:aa:d8:2c:af:04:24:b9:46:0d:79:6c:62:48:
         91:93:78:3a:7e:da:aa:d8:fa:e7:07:0e:08:6f:66:76:37:e8:
         a7:b1:08:df:2b:f2:ea:58:9e:30:75:f0:63:d7:94:72:a0:1b:
         57:b7:23:c6:7a:0a:f0:28:58:8b:e4:00:ae:1c:c4:8c:92:86:
         81:d8:6f:74:67:9c:95:aa:56:8c:cf:86:0c:65:a6:ec:62:0f:
         ab:66:c4:ed:f9:56:4e:61:53:d0:49:99:09:b3:0f:d1:11:e5:
         f7:85:4f:ba:e1:21:7e:fd:d3:c6:c5:5a:d8:c6:dd:65:2f:1d:
         8a:f2:8a:8c:72:32:2e:00:bf:14:d3:e7:9a:a9:6a:36:ae:ed:
         1b:75:17:63:88:cb:f1:c7:3f:d0:54:35:a7:69:65:6e:c6:c5:
         94:2b:d0:54:93:35:5e:ee:9b:78:07:f7:ef:f3:bd:ff:2b:b9:
         be:e9:35:c5:f4:6c:c4:51:b1:b8:53:fe:1f:a7:c9:2f:73:fc:
         1f:14:e8:04:c5:f2:b7:55:0c:4d:95:59:48:05:5c:03:3e:c3:
         69:c9:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:28 2024 by rpki-client on console-ams.rpki-client.org