Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa
File:                     95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa (raw, json)
Hash identifier:          vyKNPmLwKhQ3v5CKU+3qejKQQcn2wJVoNv1nvmn9gIg=
Subject key identifier:   49:7A:0A:D5:C7:7B:DD:3D:0E:A3:32:1E:80:E2:F4:0C:88:FF:74:8D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB84AFBF8CEF3F9BD67A00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     21570
IP address blocks:        216.191.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:84:af:bf:8c:ef:3f:9b:d6:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=ba3609c4-c614-4b9a-8e7c-b9174e34258a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:0e:03:03:b2:b1:d0:34:42:2c:d4:40:b3:
                    a5:59:94:0d:35:45:5a:a2:61:74:89:1b:e2:e3:c6:
                    19:ab:c4:b9:0f:28:32:71:e2:0d:df:11:c6:e4:82:
                    16:ab:ac:e5:4a:3a:4c:d9:97:bc:08:2c:64:a6:ca:
                    a3:69:92:2e:9d:75:e7:06:ca:d7:32:36:b3:83:02:
                    3e:3e:2c:18:32:f0:92:a1:55:69:dd:ee:75:08:60:
                    38:a0:48:7b:8d:7f:c5:c0:19:3a:a6:f8:3b:e6:54:
                    50:a5:c6:0a:9f:23:3e:50:b5:e1:35:03:63:69:f3:
                    d3:77:91:af:38:2f:9e:86:d0:a1:c7:5d:92:d3:07:
                    7e:91:43:54:44:b1:f2:c5:e7:c6:04:1f:e3:94:5d:
                    80:e0:25:c8:80:d2:eb:93:3f:5b:c0:d6:ff:1b:d2:
                    c6:ee:2f:15:b8:4a:55:dd:02:77:75:70:32:b8:8f:
                    c6:f4:c0:03:f4:a0:fc:6e:a9:ba:b4:03:6a:ec:d6:
                    cb:82:0c:5b:4b:36:40:69:ee:9c:68:ff:24:71:23:
                    64:62:ec:be:2c:15:62:b2:48:c2:f3:60:4e:1c:4e:
                    66:0c:a1:b6:2f:07:09:3f:34:01:20:f3:b5:67:5b:
                    6a:d9:e8:17:b1:d4:4b:3b:c4:38:6f:34:ae:46:ee:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:0A:D5:C7:7B:DD:3D:0E:A3:32:1E:80:E2:F4:0C:88:FF:74:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:4a:3d:dd:9b:57:6d:00:94:ac:ac:a6:7b:f4:2b:a9:00:
         19:dc:4d:a8:7d:f0:0e:08:58:39:59:13:c8:8f:c2:1e:f8:e3:
         b9:f1:6c:90:3a:e9:1d:37:5d:fe:f2:63:64:29:b9:1b:66:22:
         49:b7:a6:4d:4c:7e:75:24:49:46:ff:23:34:76:b1:88:f6:ef:
         64:f3:b5:f9:f4:52:0f:ed:9c:b6:8b:06:c2:52:83:a8:f6:a9:
         22:2b:2d:94:26:d6:ae:26:fe:ac:4c:ab:73:fc:3a:a2:8f:f1:
         b8:ab:71:d8:80:5c:df:1e:08:f5:5f:3e:ce:f2:ba:f4:bb:28:
         82:9b:95:84:48:fd:73:66:aa:54:0e:42:35:27:7f:e1:22:34:
         1f:f6:c1:b8:7d:66:27:07:0c:e2:86:38:cb:a0:3e:05:5c:4c:
         16:b5:86:d8:47:2e:7d:57:0c:b6:aa:11:9b:c0:23:48:fc:07:
         78:0f:9b:cd:9b:0a:e2:65:1f:47:1e:6e:84:8d:b4:86:c3:09:
         dc:b0:bc:34:96:d7:0c:eb:c0:64:a7:a2:14:55:f6:94:f0:53:
         41:ef:36:15:34:b5:da:94:60:6b:ab:6c:f2:ca:24:d3:77:5a:
         f2:fc:4e:ee:6b:df:26:8b:fb:a1:0a:b5:21:ac:65:85:35:10:
         ae:df:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:30 2024 by rpki-client on console-fra.rpki-client.org