Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
File:                     fefa3b84-b268-3640-ba36-19a910258277.roa (raw, json)
Hash identifier:          kZcGjMu7LWFm7kizHN+8Uhmxle73sg7PE8Y54Z4cBbc=
Subject key identifier:   E7:99:4B:B7:6D:6E:2E:E6:23:90:97:C1:BE:B4:74:9B:18:09:A4:FA
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858478721317D26128BFEF9076000
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:31:7d:26:12:8b:fe:f9:07:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=0d8499b3-0336-444b-930e-5be479d323b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:52:01:46:54:68:0b:4e:ce:41:81:48:d6:
                    48:d5:80:36:6a:12:cd:f4:6e:81:fa:ec:fa:c9:98:
                    c9:43:4f:59:7e:83:5d:96:94:ba:7d:d4:4b:16:bb:
                    18:c7:1d:78:b0:73:5b:81:b5:f5:fc:26:c1:65:9e:
                    8c:c8:cc:93:27:62:95:f2:db:bc:9b:f8:42:c4:f0:
                    99:7c:27:f1:ed:71:51:a2:06:b4:77:8f:7c:ed:6c:
                    21:97:36:52:37:9b:e3:13:de:31:85:18:9e:44:bf:
                    c0:ff:81:30:e7:99:fc:69:53:53:33:ae:35:ad:52:
                    53:a9:d2:c5:f5:91:54:5e:aa:f1:a5:27:68:e3:81:
                    18:54:ad:d0:52:d6:cb:5b:6d:61:99:03:fb:84:85:
                    63:9b:63:b8:0e:2a:64:46:c0:ff:9a:8c:9f:23:0d:
                    da:68:91:19:26:7e:25:3f:52:66:98:da:f4:01:df:
                    9f:5b:70:3b:34:0c:e1:a6:d5:74:47:c2:1c:2e:d1:
                    89:4d:fa:5b:8b:1f:d5:2a:ff:5d:84:1a:5b:71:fe:
                    4d:a4:59:e0:a7:2e:59:2b:4e:c3:50:dd:e0:27:d1:
                    98:bf:70:d6:e2:3d:f4:dc:d3:2e:8f:8d:69:17:6a:
                    42:6f:c2:28:2f:22:d1:95:f1:52:cd:24:00:7d:08:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:4B:B7:6D:6E:2E:E6:23:90:97:C1:BE:B4:74:9B:18:09:A4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:6c:50:41:c3:69:d9:7a:17:a2:b8:5e:fd:eb:59:6f:fe:
         cb:a6:77:17:62:aa:46:7d:19:de:7a:aa:70:52:29:41:1d:97:
         62:65:ec:5e:10:24:c8:87:a2:08:22:25:ec:09:dd:bf:d4:fa:
         dc:b1:df:58:44:16:2a:03:af:c1:65:b1:2c:76:f9:ad:a1:33:
         00:1b:0b:1c:34:6c:d5:44:e5:61:71:0c:f0:01:20:63:85:3b:
         37:89:f1:a6:64:0e:8e:87:b8:26:a6:8d:b6:e8:cd:ed:5a:27:
         b3:cb:25:6c:93:ad:1f:65:b4:3c:5f:a0:81:c7:58:ec:f8:47:
         90:7c:aa:db:c7:3e:f6:37:f2:b3:cd:ad:67:00:86:7f:ab:2b:
         aa:60:66:9f:b4:dd:f0:d7:e6:cd:12:34:63:af:7e:e1:e6:be:
         6b:d2:cb:b1:43:05:a3:ea:03:87:60:92:31:ac:46:b9:9a:b6:
         7e:e8:2f:c3:fc:03:81:4a:09:75:e5:9a:7b:37:57:cc:51:a4:
         01:92:3d:a9:1c:a6:43:f5:ec:16:7a:ed:78:00:a3:a3:a9:86:
         89:d1:45:21:0b:e9:33:2b:18:f6:85:6f:29:d5:e8:c1:2d:7c:
         d0:6b:2e:cf:14:fa:8a:68:d1:de:65:83:7a:75:f8:c8:4b:ed:
         2f:66:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org