Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
File:                     771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (raw, json)
Hash identifier:          pTY62LMZQlYFZnUzvEf1C2y7BIRjq9RjYwWYgogLo3w=
Subject key identifier:   24:01:0C:DC:C5:82:57:C3:50:EC:A5:42:B9:EB:D7:8B:24:A2:76:17
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F43285847600B7D702EA8360DF09DE160
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     13506
IP address blocks:        164.95.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:7d:70:2e:a8:36:0d:f0:9d:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=9b6919f0-0447-4002-9697-2ec9b346c5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:a3:82:6c:89:65:46:4c:99:2d:51:99:20:
                    31:e0:51:05:82:63:0c:0b:ac:32:8e:f3:31:91:38:
                    ff:10:45:15:63:cc:55:ba:56:66:5e:7a:27:a4:52:
                    98:39:70:da:20:8c:6f:f9:10:6d:0f:6f:de:55:97:
                    99:19:6f:5e:83:26:b2:fd:b4:d4:13:fb:20:26:a8:
                    82:7c:e1:a2:e8:e2:86:d6:55:ca:3a:24:21:f4:28:
                    0b:16:11:6d:35:ac:76:0f:18:bf:a2:3a:d5:04:f1:
                    08:e9:af:52:ae:c2:03:34:ca:c9:20:05:84:d7:97:
                    ad:bb:fc:aa:16:1e:94:22:bc:52:b0:69:e1:cc:04:
                    2f:c3:e0:c2:5d:29:23:6d:5d:08:07:30:de:21:b4:
                    0d:9d:f1:f6:30:d8:5e:75:0f:f4:cd:6c:8d:33:73:
                    fb:fe:35:ec:92:32:8a:f8:e6:7e:85:3e:68:44:3b:
                    d4:e3:28:0f:44:17:16:d3:e6:66:36:ae:26:ac:9c:
                    b0:13:ef:44:5e:83:c2:e4:fd:47:34:bf:8e:97:20:
                    91:bd:7b:5d:d5:bf:1d:fc:24:ab:2d:0c:26:5b:c6:
                    bd:81:d1:1e:e8:25:b1:c5:4f:f5:55:e5:84:9d:f5:
                    8d:fd:d5:57:b8:7e:67:66:31:de:e5:d5:51:9c:b3:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:01:0C:DC:C5:82:57:C3:50:EC:A5:42:B9:EB:D7:8B:24:A2:76:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:96:b7:80:43:63:65:74:30:0a:6a:f0:be:27:d4:ee:48:
         67:5a:78:24:d8:68:10:6d:be:96:fd:01:bc:74:f0:69:11:08:
         e9:c1:11:fb:99:65:c4:b9:79:7c:81:48:ea:36:fa:4b:81:41:
         81:ef:23:8c:d6:84:b5:38:e2:10:83:1a:ba:8b:05:4e:ad:ff:
         96:eb:da:87:f4:df:8e:23:bc:7c:a4:9b:54:b6:88:3d:63:6f:
         50:67:e8:89:d5:dd:04:8a:39:5d:b8:50:c1:46:8f:a7:e2:0c:
         f4:24:b6:57:8e:fc:dd:cb:a2:59:92:5d:0f:9e:38:7c:dc:3a:
         b2:ab:05:4e:ba:7e:d8:b0:ef:99:0e:41:eb:a9:26:24:55:e4:
         a8:de:ac:d2:7c:bb:bb:8e:c9:65:24:bb:c7:15:76:1b:07:7b:
         40:df:df:2e:6e:ec:e6:0a:22:b1:0b:9d:a2:2d:df:79:32:81:
         02:16:dc:d7:96:ba:1c:fc:6c:bb:48:da:43:d0:f8:0d:a9:95:
         90:fd:9b:63:db:fe:ca:ba:6d:85:db:7d:b7:e7:c8:c4:f9:41:
         77:9d:05:e2:64:2c:f3:9a:37:99:84:e1:44:aa:0f:3c:7b:d0:
         31:89:ec:56:32:35:be:1e:7f:f7:e9:d4:23:73:3f:f6:46:63:
         2f:0e:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org