Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
File:                     4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa (raw, json)
Hash identifier:          s8iIoxr1Hju81iUdeWcUuuKhagr7A25aCVGHEFmQfpw=
Subject key identifier:   E8:36:17:07:54:8F:6E:65:E2:12:B6:67:B5:DE:19:D8:E0:FE:AB:86
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F50092D24FB7789895BD80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:00:92:d2:4f:b7:78:98:95:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=70b927e5-fb95-4b19-a9d7-39b84f693240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:34:cf:d3:d0:4e:29:44:11:20:49:73:68:
                    0a:59:a4:f6:5b:84:df:c4:39:7b:6a:27:9f:10:55:
                    20:0b:a0:4f:a2:af:2d:cb:47:3b:6a:51:32:60:67:
                    83:74:de:e7:ea:2e:ea:f3:a7:b5:fb:74:48:00:de:
                    b2:bc:d0:95:1f:75:ed:5e:52:b4:79:ce:86:25:25:
                    37:b0:f3:14:6d:9a:32:af:17:52:13:91:8e:25:a5:
                    dd:de:4f:22:c1:8c:91:af:88:44:42:69:12:da:b2:
                    ec:ae:cc:50:0a:75:8a:b2:7f:11:99:53:3d:23:6a:
                    bf:a3:54:0b:19:f9:96:ed:af:56:eb:7f:e7:3c:ac:
                    1e:07:19:3f:8e:4f:e4:71:79:f0:ec:ad:f8:fb:9e:
                    56:1f:42:3f:ff:55:82:03:3c:ea:74:04:ae:93:b1:
                    0d:eb:9d:01:44:fd:5e:b2:f1:59:8e:f8:ce:cd:57:
                    c5:3c:9e:da:3f:b4:fb:f5:2e:b6:fe:d4:65:fa:7e:
                    8f:c8:89:3a:1b:57:65:ae:34:03:9c:6d:f7:08:70:
                    f6:5a:19:4f:e1:8b:27:5d:1b:31:51:2e:0c:7c:97:
                    f8:78:88:83:62:4c:99:23:9b:d7:22:4d:ab:21:bf:
                    01:1d:f3:a0:41:a8:91:5a:73:77:e6:d6:e9:df:68:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:36:17:07:54:8F:6E:65:E2:12:B6:67:B5:DE:19:D8:E0:FE:AB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:74:e3:33:84:c7:06:f5:a1:75:6b:2c:a6:f5:b3:20:a3:
         3d:50:de:14:0a:61:12:7e:98:92:b5:76:6e:27:cd:ec:ab:38:
         56:a4:b7:c5:92:f2:08:8a:37:48:af:08:65:d1:93:72:08:8b:
         42:90:95:e9:1e:33:67:87:d8:ea:70:7c:8a:8b:36:bc:45:03:
         84:0e:a1:13:ab:9e:d9:59:e4:9d:29:2f:75:d6:5b:b0:b7:b9:
         6a:72:51:78:67:a2:0c:da:0c:5e:a2:d0:c2:73:e4:12:b9:30:
         f5:73:87:b6:69:c5:fe:a9:ca:ce:e5:fe:04:9c:3d:04:07:bc:
         33:b8:0a:01:b9:40:6a:38:1d:f5:73:db:c4:ad:76:8b:2b:00:
         ee:a3:ab:51:c6:63:ee:a1:a9:52:52:8d:c0:23:40:7d:69:3a:
         ba:3c:c3:11:dc:40:42:f1:11:47:32:c6:c6:9a:56:32:83:bc:
         4a:47:3b:63:2a:6b:67:05:54:b7:e8:80:75:4b:84:df:24:78:
         51:9e:8c:2e:15:56:53:67:dc:12:78:0e:d2:75:b3:25:e2:5d:
         08:f5:10:f1:75:4d:97:7f:f8:c4:e0:5f:1d:5d:63:ea:9e:d0:
         8b:fc:42:5a:6c:41:d7:29:f6:ef:2a:98:04:63:25:97:7c:3a:
         53:73:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:32 2024 by rpki-client on console-ams.rpki-client.org