Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa
File:                     387ec337-98bd-38d0-95b0-47845596949f.roa (raw, json)
Hash identifier:          ssRl/mRfefXEpzmyUhHPUCo+2sEUs7e7FzWPCKvrjDA=
Subject key identifier:   94:12:37:17:EE:3E:E4:02:0E:E9:7B:08:D4:71:A1:36:A3:AC:FE:43
Certificate issuer:       /CN=a75ece7f-5380-409e-b027-b6733c088c34
Certificate serial:       010D0C9F43285847C7A54ABEF185D6F23F015C00
Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa
Signing time:             Tue 05 Nov 2024 15:38:51 +0000
ROA not before:           Tue 05 Nov 2024 15:38:51 +0000
ROA not after:            Mon 03 Feb 2025 15:38:51 +0000
asID:                     59
IP address blocks:        72.33.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:a5:4a:be:f1:85:d6:f2:3f:01:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34
        Validity
            Not Before: Nov  5 15:38:51 2024 GMT
            Not After : Feb  3 15:38:51 2025 GMT
        Subject: CN=50e01063-4888-4329-90db-a67798885ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:04:ec:14:aa:4e:1f:30:84:a8:4c:7b:24:
                    70:54:15:32:4a:89:e5:51:66:56:80:ed:e7:77:2c:
                    f9:54:6e:1f:c0:be:e1:62:aa:c8:d6:d7:b4:d6:a4:
                    69:77:c3:4e:b9:c9:bd:86:8f:4d:c8:0b:8f:9f:9e:
                    9d:2c:45:67:bd:59:f7:68:3c:4b:63:6d:b5:5c:4a:
                    61:19:d7:dc:5c:0c:24:4b:e4:c3:4a:3b:fc:17:26:
                    19:88:51:02:b7:3d:72:c3:c4:50:ba:6e:a7:26:8c:
                    c8:e3:aa:7f:f8:60:56:9a:ee:84:c3:ca:78:c7:f9:
                    c9:ec:9a:06:54:5d:e9:cf:27:41:fc:c2:4f:5c:b3:
                    2a:25:d5:fd:31:9c:42:59:44:6a:1d:bc:ca:25:a1:
                    f3:3a:cc:23:6a:53:59:97:48:1d:09:7f:91:82:35:
                    0f:8a:2e:15:1a:41:c2:5e:23:b2:f6:e9:1c:c5:16:
                    60:2b:d3:be:7e:7b:70:d5:43:7d:e6:99:b6:cc:55:
                    41:6c:b6:0a:06:db:69:98:48:9f:f2:1c:52:e5:2c:
                    db:d3:19:e3:bf:de:1d:14:2d:68:0a:dc:7b:6d:12:
                    76:30:c8:93:a6:d5:56:d2:04:f3:6a:04:fd:c4:f4:
                    71:19:40:3c:2a:73:00:d2:11:33:ae:e9:95:2e:4e:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:12:37:17:EE:3E:E4:02:0E:E9:7B:08:D4:71:A1:36:A3:AC:FE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl

            X509v3 Authority Key Identifier:
                keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:df:22:36:b8:29:12:4b:59:76:d4:28:5e:db:87:b7:be:
         0a:84:db:c7:da:0f:06:1d:c1:81:a1:d6:59:40:97:54:bf:f7:
         b7:ba:12:7b:02:a6:b1:09:4f:b7:08:b3:7f:c2:8f:90:d9:86:
         b8:15:ad:56:9d:c5:77:5b:2b:e6:a9:82:7a:53:6c:bc:ff:40:
         ed:dd:74:fc:d3:9f:e3:49:f6:ce:fb:0f:5a:11:fb:99:e4:7e:
         30:42:e9:41:81:ef:58:78:2d:dd:7c:c8:02:44:22:6f:83:f8:
         6e:ba:69:e4:ea:69:28:8c:42:e6:7b:af:99:6a:7b:db:35:6a:
         7e:e4:81:e3:4f:00:3f:5e:b7:64:60:39:f0:94:35:3b:e8:c1:
         5e:ba:c5:26:cb:9c:a8:ed:09:0b:d2:e0:58:b5:2e:63:bd:f4:
         04:c5:91:82:26:3a:63:0c:8f:cb:dc:6e:40:5f:c6:94:5a:91:
         08:a5:e9:8d:72:08:e0:12:f5:56:6f:34:53:ed:a3:aa:dd:d0:
         e1:d4:1d:45:02:0f:a5:ef:19:3a:b7:73:86:2f:15:cb:3e:dc:
         11:7d:1b:ed:02:87:06:61:a5:c6:a6:39:f4:53:39:ef:a1:5a:
         ea:98:25:dd:a6:2e:26:2b:3e:c0:17:20:cd:7d:fc:e8:2d:c5:
         66:57:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:25 2024 by rpki-client on console-fra.rpki-client.org