Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/152d9581-6910-39fe-84ec-b67beff30c9a.roa
File:                     152d9581-6910-39fe-84ec-b67beff30c9a.roa (raw, json)
Hash identifier:          O3yzwu2/WpQguS/avDIPi/uTcnxvIuLMSoAhH7wsjNI=
Subject key identifier:   CF:0B:DD:9F:5F:CC:0D:8F:13:7A:17:16:F6:A0:FE:CF:43:AB:26:D1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847CE6F2CA6ECC898E604234280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/152d9581-6910-39fe-84ec-b67beff30c9a.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     25668
IP address blocks:        64.114.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:2c:a6:ec:c8:98:e6:04:23:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=f448df62-6829-4d4e-bfda-5e163d648eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:bc:14:6f:76:63:95:46:7b:95:d1:eb:1c:
                    88:3a:39:c8:a6:bc:4e:e8:b5:56:c7:f5:3c:0f:d9:
                    93:34:85:83:bf:9d:93:a0:6f:22:ad:97:37:7d:a3:
                    03:29:83:01:36:e7:ab:4c:1c:74:33:d6:31:c1:62:
                    8f:f9:ae:f3:d9:ab:10:60:a5:6e:5e:06:00:a9:1a:
                    88:8e:35:4a:fc:df:63:65:67:00:16:2e:1a:ab:78:
                    96:b5:b8:21:e0:d4:fd:36:a8:45:7b:61:78:f1:56:
                    08:e9:b7:89:6c:c8:77:d7:02:48:ad:39:0f:04:50:
                    c6:9f:5b:ec:a4:d2:8d:c2:4f:3b:b3:82:32:ac:20:
                    17:2a:96:5d:53:39:ba:64:4b:3c:3d:6b:04:69:55:
                    cf:79:ea:41:12:d7:02:13:33:7f:b4:75:9b:50:28:
                    59:52:92:c0:a1:a9:41:4d:eb:18:ae:59:0f:6f:ab:
                    09:f2:3c:87:00:3d:c6:0b:53:3c:55:7f:9c:47:ec:
                    10:cf:a7:8c:49:78:11:cf:4c:4b:8e:73:98:51:c2:
                    16:b9:c5:fb:93:1e:1a:a8:1d:db:58:ec:8a:87:71:
                    73:f0:9c:0e:f8:25:0b:35:f8:c8:39:ca:52:36:02:
                    1b:09:a5:5d:de:f0:44:42:25:01:37:14:fe:aa:56:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0B:DD:9F:5F:CC:0D:8F:13:7A:17:16:F6:A0:FE:CF:43:AB:26:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/152d9581-6910-39fe-84ec-b67beff30c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:43:04:59:ae:92:6e:85:65:81:0c:4b:5a:69:6f:9a:64:08:
         6c:8a:b9:75:a0:37:65:77:82:c5:43:db:84:44:4a:f8:5a:84:
         9f:4b:24:b8:31:83:66:c6:8c:73:14:f5:63:4e:46:ff:46:12:
         8c:ef:af:4a:05:d0:a2:b2:9d:9b:2a:3f:aa:df:d5:52:07:45:
         92:bc:5f:d4:5d:ca:36:89:e3:05:8c:36:cf:ce:07:15:9b:a7:
         5c:6c:48:ba:a4:bb:ea:c8:7b:fc:73:99:da:d8:98:64:f5:1c:
         cf:4e:81:6d:05:35:59:24:77:91:23:00:69:4c:0e:6a:6c:e5:
         dc:4f:05:b5:af:2e:f2:62:21:ac:c1:b6:7c:4f:7d:03:ae:a5:
         ed:b0:14:47:1c:5f:35:fe:23:00:e4:ce:5b:6f:00:5d:f7:58:
         02:fb:18:f6:0e:47:e6:ca:66:40:82:ec:5c:29:6c:d9:78:c7:
         53:e3:1e:84:4e:94:f4:a5:5e:e6:9d:ca:77:fd:af:63:4d:4a:
         e8:d4:6a:63:08:a5:9a:8f:3d:88:84:da:79:1a:3c:83:0e:1c:
         5a:39:e1:d8:e1:b5:6b:35:b1:a7:d8:9c:b5:f9:dd:fb:cc:4b:
         3b:90:9f:a7:12:56:70:7d:e4:ce:8f:37:f6:98:23:b5:6a:80:
         8f:41:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:28:05 2024 by rpki-client on console-ams.rpki-client.org