Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa
File:                     694332a3-7a56-39e6-aeb3-45e55815e400.roa (raw, json)
Hash identifier:          98sNKwVxILQz09D5btcyxOUEFFDKHix5lL5tcUdL68A=
Subject key identifier:   95:EA:4F:8A:D6:79:42:C5:52:3C:E4:15:AD:17:74:D4:7F:FB:EE:70
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584742BB589834F75E7B8D174D00
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     395425
IP address blocks:        72.42.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:58:98:34:f7:5e:7b:8d:17:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=de855a75-8528-4e6a-a7ca-4ef5196f2abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:a5:bf:b7:e6:d8:2d:01:90:41:8b:86:f3:
                    05:e3:cb:d8:f6:db:64:eb:b6:14:3c:07:41:3a:e5:
                    64:0e:27:df:c6:fb:0d:3f:80:be:a6:7a:4c:06:26:
                    93:1b:e5:b1:69:08:66:7d:fd:ae:a7:bf:1d:e8:e5:
                    c6:71:78:4b:d9:cc:ce:5b:7b:aa:cf:b7:a9:c8:4e:
                    30:60:27:2c:44:09:fc:75:a1:8e:c7:b1:9e:12:fc:
                    41:7a:3b:25:8e:4f:f0:0c:17:d3:ab:79:2b:8a:dd:
                    b9:ab:aa:a2:d8:8a:9b:90:c8:05:8c:e2:35:8d:f9:
                    96:6f:a9:ea:12:8e:a2:87:40:b2:07:ae:5f:36:3d:
                    0c:f6:15:74:df:bf:ec:76:b2:02:16:8f:a6:ac:11:
                    e1:e6:2e:95:1c:b4:2b:df:55:6f:8a:a5:8e:42:57:
                    59:2d:36:09:db:f1:9f:ce:06:0d:a7:a9:53:23:b4:
                    ef:10:be:8b:f7:f3:17:f5:dd:fe:2b:40:dd:c4:86:
                    1d:06:c2:28:e2:f5:07:3d:d9:fd:ff:6c:c5:ca:ab:
                    71:00:58:3b:7d:74:14:7b:c6:7c:cf:a8:38:18:ff:
                    93:7c:6c:4b:85:d5:0a:6a:2e:e5:51:e3:05:4f:a6:
                    10:0f:b4:5b:fe:43:f6:a9:39:98:1e:55:ac:65:b5:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EA:4F:8A:D6:79:42:C5:52:3C:E4:15:AD:17:74:D4:7F:FB:EE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:fa:a5:31:93:7e:af:99:92:10:30:bd:e5:2e:64:83:a3:
         1e:ac:49:31:2d:f2:65:a1:2f:b5:44:ab:fc:37:c0:52:5d:0a:
         0a:8d:ad:c9:54:82:0f:34:b3:98:93:96:45:35:e5:2f:64:51:
         e7:66:00:83:8b:96:ff:2d:b4:e7:49:a8:32:a6:ea:81:2a:4e:
         8a:32:a6:1c:5d:5d:2f:9a:23:f8:89:28:6f:13:06:57:c1:fe:
         b2:ef:e1:9f:d3:6d:89:d8:a0:7c:24:91:f5:75:df:84:81:ea:
         23:c0:68:eb:d7:51:b1:69:5d:24:8d:26:77:d6:7f:49:74:cb:
         ed:47:64:5d:9b:c4:e1:b1:54:a6:8b:11:db:ae:93:e7:dd:7d:
         68:a1:e8:b8:68:1c:4b:bb:46:78:d4:1a:48:c8:66:2d:a9:9f:
         6f:b5:be:d0:7e:05:45:26:c0:7a:6a:b8:a7:42:50:b5:71:f3:
         61:7c:2b:31:ac:32:ba:a1:b7:be:54:6c:27:f0:5a:c2:fb:0c:
         f1:a4:da:4c:7e:ae:6f:e5:69:84:fe:9f:1c:3b:d4:03:97:69:
         c7:2e:ae:01:6c:75:50:53:b3:12:0e:3e:95:c2:99:a6:45:99:
         92:2f:64:db:33:db:51:2a:77:fa:d0:f1:9a:2a:f6:e9:89:07:
         ae:8d:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org