Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
File:                     33faf54e-b2b5-3d79-910d-958696a77f7b.roa (raw, json)
Hash identifier:          PdyolHLLC2ZHE+Znr6qni3sVoGtPmZid59bSmeD4An8=
Subject key identifier:   25:3A:27:EB:A1:C8:35:57:97:64:13:1E:29:C8:8B:7E:47:62:EB:09
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847213B2654472DD1971359F800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     64267
IP address blocks:        141.164.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:26:54:47:2d:d1:97:13:59:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=009827f9-1a6e-45fd-9987-e64dcf171a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:d0:2d:3d:ef:5c:e5:6a:1f:9e:22:61:12:
                    80:66:7f:92:c9:95:c3:53:1e:fc:ce:a9:24:15:df:
                    fb:01:8c:f1:0c:4c:b8:d1:de:6c:27:ee:5a:6b:10:
                    61:22:59:0b:a6:f2:1d:40:b1:da:38:c4:63:6c:da:
                    57:3b:b4:2c:61:fc:ca:3a:20:04:e1:0d:fc:e3:ab:
                    12:6e:47:08:35:37:1d:91:56:03:d8:27:ad:0f:a8:
                    69:6c:db:85:09:81:0c:bf:c0:bc:f2:bf:17:ac:6e:
                    88:27:fd:08:50:d7:ab:92:d1:ac:0c:86:bb:ab:a0:
                    d3:2a:53:74:15:26:9b:9d:7f:be:d8:2d:d7:43:d5:
                    c0:b0:29:c1:32:6b:fb:0e:6a:d4:33:78:26:ed:6d:
                    29:eb:6d:7b:2f:35:cc:40:f3:79:92:e6:5c:af:dd:
                    5a:fa:be:cd:6e:66:d7:db:cd:21:ae:0a:eb:ef:ac:
                    cc:ba:dd:e0:64:3a:2d:8f:b7:b8:d2:a9:7a:9c:79:
                    44:5c:4e:74:5e:f6:9c:66:12:a5:c4:5f:7c:c7:6b:
                    06:12:3a:16:ad:25:c4:8b:9d:d3:7a:ec:f6:fc:48:
                    d8:e1:fc:46:56:44:aa:9c:77:65:95:18:26:a6:1b:
                    b8:e7:ff:43:b7:0a:28:b4:f3:4e:5b:d9:83:1c:71:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3A:27:EB:A1:C8:35:57:97:64:13:1E:29:C8:8B:7E:47:62:EB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:71:51:99:81:75:2d:f1:1a:e3:54:1c:ab:b5:0d:8d:90:
         99:24:b6:90:13:2c:0d:e8:d0:28:44:a6:bd:da:74:f6:83:29:
         02:56:b3:d9:17:88:9e:22:3c:16:a8:16:de:92:3b:d9:39:b6:
         03:1a:50:7e:15:40:27:c5:5c:0e:07:18:6d:20:62:4d:96:a8:
         34:aa:64:8e:22:e9:ee:73:85:27:1e:c2:e8:aa:c9:53:b9:fb:
         d6:cf:37:d3:b9:29:5f:1e:59:ae:62:b1:85:4c:f2:4c:55:b4:
         cb:a0:bd:b1:37:86:5b:e7:20:e3:d3:ef:73:1d:87:54:12:42:
         f8:80:46:98:fc:e0:fc:cf:f2:da:9d:39:2a:22:2a:12:47:dc:
         5d:78:36:80:7c:7a:74:18:01:e1:57:30:aa:32:bd:0f:46:2a:
         4a:1b:f0:43:59:d7:ee:49:40:86:19:fe:53:2e:29:01:ae:1e:
         df:9d:7e:6f:09:bc:14:69:7e:52:a3:19:d9:46:1e:54:8e:1d:
         0c:6b:a3:70:6e:61:71:3e:06:db:80:7b:78:83:0c:b9:1f:88:
         f7:7d:af:54:1b:d8:fa:7a:40:31:c6:23:dd:6b:c3:c6:76:8a:
         9a:5e:8e:97:5d:da:1d:6b:07:a5:15:0a:60:4f:d7:32:f9:6f:
         da:11:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:20:38 2024 by rpki-client on console-ams.rpki-client.org