Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa
File:                     4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa (raw, json)
Hash identifier:          zDmv9T0G5CAZAw9Jv/XelzX9OkPwS9f5BoSv/fJIRNI=
Subject key identifier:   14:47:0F:C9:43:87:93:73:39:EC:08:93:AB:27:E0:CC:D1:39:C7:6D
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847EA5A04386AFD4E83B2A56C00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     13347
IP address blocks:        69.91.162.0/23 maxlen: 23
                          69.91.174.0/23 maxlen: 23
                          149.143.144.0/22 maxlen: 22
                          149.143.152.0/22 maxlen: 22
                          149.143.164.0/22 maxlen: 22
                          149.143.172.0/22 maxlen: 22
                          149.143.180.0/22 maxlen: 22
                          149.143.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:04:38:6a:fd:4e:83:b2:a5:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=c2f6a5f6-a29e-41b5-9319-5daa33ae04c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:1d:97:73:b8:46:7e:02:a6:f8:f7:ea:08:
                    e2:d3:42:29:64:8d:9d:a1:93:c3:21:f0:62:7e:5c:
                    01:2a:c0:a2:54:d4:68:98:e2:c5:e5:d0:b6:9a:b9:
                    7e:f2:11:45:bc:eb:17:41:88:07:eb:97:f0:50:8e:
                    fd:20:fb:79:52:69:03:54:ed:fd:14:01:db:4f:5b:
                    46:b8:4c:e8:26:93:ae:c7:ce:68:f2:ac:98:1a:88:
                    f5:86:30:29:f4:5b:40:ea:a8:e9:10:08:71:79:85:
                    65:7f:bd:f3:e6:9d:d2:b7:7b:52:c2:f5:1a:b0:f1:
                    b4:1b:a8:16:df:53:bc:8f:99:9b:a7:10:60:bf:88:
                    8a:e8:21:b8:6f:ac:a7:3b:a1:48:5f:60:b3:9d:20:
                    47:24:f5:74:eb:e0:61:0e:93:6c:90:c8:cc:64:3f:
                    62:7a:5c:13:06:82:59:eb:07:cb:8b:5c:bd:0f:79:
                    03:a7:c1:06:60:e1:30:b6:80:d3:2a:e7:e7:75:fd:
                    40:42:eb:89:be:ae:37:c8:46:9c:05:09:2e:c5:3e:
                    00:7a:ab:50:c9:bc:6f:85:2f:48:61:8b:83:17:4b:
                    c6:54:d9:3f:d2:2e:37:73:42:58:16:e6:2f:19:cb:
                    b5:24:f2:36:72:50:e3:1f:57:6f:3c:dd:ac:a7:a1:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:0F:C9:43:87:93:73:39:EC:08:93:AB:27:E0:CC:D1:39:C7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.162.0/23
                  69.91.174.0/23
                  149.143.144.0/22
                  149.143.152.0/22
                  149.143.164.0/22
                  149.143.172.0/22
                  149.143.180.0/22
                  149.143.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:54:d5:1a:64:9b:68:21:9b:50:e9:4f:c2:07:df:d4:46:
         04:d8:02:6a:0b:30:40:8a:e7:ea:fe:ef:d5:d0:24:40:f1:ec:
         54:a5:4e:62:71:7f:00:98:24:75:1a:cc:54:ad:c7:64:12:ed:
         69:1a:56:8e:a9:fd:ed:e8:2e:be:63:24:d4:28:4c:e6:9e:35:
         d9:96:1d:7d:5e:d4:39:38:c5:50:32:ad:0e:aa:9b:af:8f:01:
         99:c0:bb:15:5c:dc:09:dc:b9:52:eb:cb:18:88:c3:49:f1:c6:
         26:02:06:88:91:25:b6:d4:c2:1c:b9:3b:40:9d:92:44:e6:46:
         41:47:a5:4c:f8:a4:cb:b5:b2:f2:8f:00:8f:ad:55:53:7a:22:
         9b:44:82:7b:54:65:3c:d6:d1:a9:ec:9f:08:c0:90:87:fb:4e:
         5e:72:3b:b9:00:3e:b3:1f:dc:36:c9:0c:51:89:f5:7d:9d:30:
         c6:37:66:26:49:c8:05:85:9e:77:bd:30:2b:c5:12:73:98:61:
         a4:98:6a:83:0d:56:29:00:da:fb:33:f3:06:bf:eb:7c:95:47:
         9c:c2:1f:14:15:c6:20:04:79:90:30:df:29:81:95:bf:94:b4:
         f0:c3:08:c2:30:ca:c6:68:1d:34:a8:f3:14:eb:f1:3f:51:20:
         bb:70:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:51 2024 by rpki-client on console-fra.rpki-client.org