Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab442b53-056f-3d61-9652-0fb5716bb814.roa
File:                     ab442b53-056f-3d61-9652-0fb5716bb814.roa (raw, json)
Hash identifier:          GXCqckhuOpzds7orMo6eUSwlVCR7FrZ9C6A2c76Nboc=
Subject key identifier:   97:FB:1D:F0:5A:7A:67:5B:3E:70:39:B6:9E:6A:F5:E5:71:5A:B4:5D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584733609C30FB7AB0BA61680280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab442b53-056f-3d61-9652-0fb5716bb814.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     30292
IP address blocks:        64.125.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9c:30:fb:7a:b0:ba:61:68:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=d4155c6b-5c36-45a8-b5d2-9bfeec8f80c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:68:dd:08:36:50:63:d2:12:31:89:23:05:
                    02:ed:d4:da:75:4a:70:6c:12:75:ca:76:5b:75:4a:
                    09:c6:ac:ea:2c:36:e1:d2:48:60:43:a0:49:9b:50:
                    04:9c:b7:99:3c:b3:6c:3d:a1:fe:4a:6d:a5:ca:db:
                    aa:65:2d:bd:ff:94:df:87:9e:58:61:5a:b2:43:cc:
                    1f:31:40:48:ad:5b:99:ae:db:6c:c7:12:75:c8:f9:
                    9f:01:12:3b:e0:97:d2:64:37:ca:a4:d1:76:24:0f:
                    6b:3a:7e:30:44:72:a2:b8:c9:9f:5e:93:ce:b9:f6:
                    e7:13:04:80:85:f5:6d:ca:a8:34:22:d6:f7:37:18:
                    a8:a3:75:7c:83:10:a5:0a:22:d3:e1:e3:9f:04:a3:
                    3d:98:9d:c7:b4:ea:e0:52:4b:c7:a6:4c:be:95:a6:
                    6d:46:0e:05:8d:42:38:9d:aa:bf:d6:f6:1e:ac:d1:
                    d7:a4:f2:71:35:89:1e:4e:69:9e:44:df:a7:c9:e5:
                    f2:81:7b:ee:bc:9e:40:49:fe:fc:34:c9:18:81:c5:
                    50:d4:ed:cf:e7:23:e0:b1:19:03:3e:65:2f:a6:c9:
                    8b:c9:53:b2:c8:65:75:93:9c:12:a7:7b:f6:ac:35:
                    fc:81:23:fe:67:fa:29:79:5a:61:92:a0:63:bc:50:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:1D:F0:5A:7A:67:5B:3E:70:39:B6:9E:6A:F5:E5:71:5A:B4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab442b53-056f-3d61-9652-0fb5716bb814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:38:28:27:05:c6:7e:54:88:08:e5:02:10:d9:d1:4f:2e:
         43:23:83:5f:ea:1f:8f:32:d7:86:b7:51:c6:be:88:2b:7b:96:
         3a:f6:81:3c:a1:09:d1:49:a8:68:25:b8:b6:64:89:cd:fd:53:
         8b:ae:36:d5:f8:44:4e:b7:4b:57:e7:9f:41:27:bc:ad:4a:e8:
         29:62:e7:f6:7e:2b:e4:37:b0:e8:d3:2f:19:de:c3:83:a3:9f:
         bb:6f:26:55:d0:31:1f:ce:f9:3a:60:04:bf:50:9e:29:7b:8e:
         e6:11:f0:c8:37:ad:bf:94:40:d6:ac:eb:d3:90:58:9e:1c:fb:
         31:f4:f0:28:58:2d:2e:89:fe:78:2f:0a:35:f9:e9:50:f2:e1:
         55:7a:09:2e:55:1c:5f:86:de:ad:12:a5:17:6e:72:e8:a8:16:
         4c:56:84:ca:1a:49:25:fb:91:d7:7b:0d:cb:19:a9:e8:d5:3c:
         90:e1:2a:42:16:b5:91:83:e3:10:95:97:8a:d6:8f:64:e7:03:
         8d:be:67:de:c3:96:54:54:4f:2a:66:5e:1c:08:04:87:7e:a7:
         22:ef:be:a0:7a:45:23:59:50:64:0a:69:bb:02:8e:b6:0e:9e:
         5f:e9:63:55:5f:05:41:f6:8c:03:05:e6:58:da:82:4e:b8:03:
         2d:71:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:49 2024 by rpki-client on console-ams.rpki-client.org