Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
File:                     4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa (raw, json)
Hash identifier:          GrR4sc82h7SgcQcmU05QOQOtmTzcAAqKioF+dm2F1uo=
Subject key identifier:   78:7A:A9:E9:09:4A:44:F1:22:EB:0D:93:33:13:3B:05:89:DB:AF:8A
Certificate issuer:       /CN=0215b589-0229-401c-98ef-53194fd5e2a5
Certificate serial:       010D0C9F4328584754E0E97DDF8B6C0C6E1C0E80
Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     46294
IP address blocks:        104.255.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e9:7d:df:8b:6c:0c:6e:1c:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=e122acbf-19cf-4c45-8a93-21642b578d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d9:2e:1d:99:a2:15:22:67:16:af:3e:3d:d0:
                    aa:af:0c:57:1a:47:e1:13:b7:3d:a7:a6:6c:d7:5b:
                    54:a4:55:37:f3:a2:0f:ab:92:14:e7:82:7c:f0:c2:
                    5c:3f:64:93:f6:d8:e5:71:bc:f0:13:59:0e:5c:c4:
                    3d:13:c0:e9:79:e1:f6:af:1f:09:aa:04:92:c6:eb:
                    9d:0a:6d:5b:39:f4:13:43:0b:c4:7b:ae:96:82:8b:
                    e5:a6:78:92:6e:f1:9d:e6:a7:cd:c6:ed:fb:ce:cc:
                    9b:80:9f:d1:19:10:72:ac:9d:33:ac:30:4c:61:e9:
                    e2:34:43:77:39:aa:cf:41:27:30:ec:35:07:ec:07:
                    72:93:64:c4:49:70:82:80:d5:15:d2:7a:2c:54:a1:
                    82:be:59:5d:b3:11:0c:3c:02:8c:2a:5c:51:cd:33:
                    0c:ef:40:c3:0a:97:99:26:a4:29:e3:24:90:32:ad:
                    f8:af:8c:2e:46:7c:0d:0f:57:41:97:3b:6f:10:56:
                    6c:71:70:ec:f4:35:48:1f:c4:b4:ac:e2:8f:58:65:
                    60:37:e1:55:2d:c9:64:99:f9:cb:ba:fb:72:b0:eb:
                    00:7b:aa:73:25:5e:1e:98:84:44:ba:14:6b:fb:3e:
                    70:44:cd:20:8d:eb:2d:48:41:53:a0:54:4d:2d:6f:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7A:A9:E9:09:4A:44:F1:22:EB:0D:93:33:13:3B:05:89:DB:AF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:d9:65:be:a6:8f:66:f4:68:37:b3:ac:29:63:91:22:1a:
         16:9d:47:09:7c:79:01:18:32:4d:b7:cf:ee:d2:3f:91:24:39:
         6a:a3:85:1c:a4:4c:3c:c0:b4:eb:44:6e:ad:4e:66:44:4a:cc:
         cd:7b:00:55:4e:66:6a:85:94:d1:57:f9:e9:9a:b4:15:99:ad:
         e7:73:51:90:61:7d:90:b3:05:4e:f6:d7:0b:f6:1f:76:68:0b:
         9c:e8:d0:37:68:db:f7:98:c8:92:0d:53:7f:40:67:c1:23:83:
         6e:8e:37:77:9b:53:24:5a:fa:5f:3a:c7:4f:e0:c3:61:b0:50:
         95:98:0e:48:9e:de:f3:0a:23:bf:bb:0c:e2:1c:38:fc:c6:d3:
         f5:f3:78:6d:c6:d4:31:f5:49:39:c2:49:0f:f1:de:27:2f:eb:
         d2:d3:a9:af:2d:a3:87:9e:9b:b7:d3:35:4f:df:3a:85:ab:4f:
         7b:80:fa:47:5b:09:bb:a5:64:96:51:b5:5f:2a:4d:3b:0b:47:
         0f:13:ea:61:45:21:de:a7:0b:85:81:34:19:9d:66:a9:99:04:
         b9:c6:35:8e:74:09:1c:a9:ad:7b:b5:2f:5b:5a:b8:1e:52:8e:
         38:61:6b:17:15:15:57:cb:d8:8c:ce:f4:d2:44:31:39:d5:55:
         75:dc:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:11 2024 by rpki-client on console-fra.rpki-client.org