Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa
File:                     a754082f-4513-3ee8-a390-23ea11051903.roa (raw, json)
Hash identifier:          upZ7O+skxz+A2UiRTNnxwjdKgt4jIQjC9bLjw2YbUGQ=
Subject key identifier:   30:51:44:65:FC:82:1E:19:F8:9D:3F:DE:D7:C5:D7:68:81:19:2B:2E
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F7B7294B93BFA8BBF907C0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa
Signing time:             Fri 15 Nov 2024 01:55:57 +0000
ROA not before:           Fri 15 Nov 2024 01:55:57 +0000
ROA not after:            Thu 13 Feb 2025 01:55:57 +0000
asID:                     213122
IP address blocks:        167.94.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f7:b7:29:4b:93:bf:a8:bb:f9:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:55:57 2024 GMT
            Not After : Feb 13 01:55:57 2025 GMT
        Subject: CN=95d92bec-877b-42a2-b1fc-f547d7567418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:e2:46:97:83:5f:17:87:82:95:60:52:39:
                    a0:c1:79:6c:cd:1d:55:86:c1:4c:ec:51:5b:8d:a7:
                    3d:67:91:6e:1e:61:f0:ae:28:04:23:26:ea:19:c2:
                    c6:37:36:05:6b:6a:fe:ac:ef:d1:b0:71:fc:97:55:
                    ea:d0:1a:76:93:d7:8a:5e:9e:7f:94:7c:fb:d1:fe:
                    84:78:1c:07:f2:00:75:d1:2f:16:eb:f8:42:5f:8e:
                    a5:29:47:84:6d:06:c4:bc:e2:03:5a:d1:49:fd:04:
                    e8:c2:35:4c:29:89:83:54:0f:72:96:5d:76:b1:55:
                    7e:dd:d2:38:8b:fe:93:ff:c5:63:d2:d5:7e:85:66:
                    f3:5c:a6:c3:75:b5:82:92:a3:99:78:1f:08:f5:c6:
                    5a:23:3a:7b:8d:8e:02:65:62:33:12:b3:55:90:31:
                    1a:ef:9f:07:42:e3:0b:16:6d:b0:c5:f6:27:1e:9e:
                    63:27:53:93:a4:fe:85:43:1c:d7:5e:ee:c2:e7:18:
                    84:35:bc:1b:c0:33:b5:95:25:69:04:cc:36:2d:59:
                    ea:ba:73:b4:75:a4:fa:85:c9:da:07:a9:01:f3:66:
                    66:aa:e8:b0:d6:75:5a:84:ec:25:4f:1e:67:cf:12:
                    11:04:bd:5d:22:1a:46:42:47:7d:e5:dc:b7:95:22:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:44:65:FC:82:1E:19:F8:9D:3F:DE:D7:C5:D7:68:81:19:2B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:2f:01:67:99:a9:0b:8c:de:4d:84:97:c8:bb:e4:3b:ec:
         4b:cb:a4:82:d3:b1:eb:29:5c:ca:00:a0:86:ed:85:be:0e:99:
         02:c7:0b:77:6b:ab:e2:8b:1b:ed:39:52:e6:44:fc:0f:5e:0d:
         4b:c3:3e:ef:e5:f1:20:13:a3:35:7b:6f:dc:9a:15:4c:6b:29:
         27:96:b6:22:0e:02:14:73:63:03:17:3f:e5:5a:83:8d:2f:1e:
         12:1e:63:66:69:47:61:c0:95:2a:46:3d:4c:73:75:9c:90:e0:
         0b:24:d0:c1:eb:e0:c9:5e:7c:28:18:48:e5:46:40:3b:25:1a:
         fe:a6:5c:79:d0:80:a8:04:a3:c4:4b:d6:da:4a:7d:2a:1c:59:
         32:39:4d:6f:d0:7f:e6:7a:ca:7e:48:57:71:b1:50:36:8a:f2:
         be:14:91:9f:6e:9a:8d:c7:25:25:2a:f7:aa:25:83:21:7b:cb:
         07:f7:2f:59:42:56:1e:91:33:91:9f:14:62:7e:9b:68:b3:ee:
         8f:7c:10:e7:ae:4b:d2:67:fd:1e:aa:a9:30:61:fb:97:1f:0d:
         eb:52:60:1f:ff:e1:73:d9:fc:03:62:3d:b5:16:97:f0:88:b5:
         9c:76:12:4c:bd:a7:96:d7:f5:d1:d8:62:93:8e:87:ee:0c:57:
         e7:1f:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org