Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5d477749-a47c-39c9-b8b4-871d2078f5df.roa
File:                     5d477749-a47c-39c9-b8b4-871d2078f5df.roa (raw, json)
Hash identifier:          8zza1UkK7Xn9kNt9zN5o0pNDsL7evqc+zAo9XMAL6VI=
Subject key identifier:   75:FA:08:52:BF:25:E1:9A:2C:C5:02:95:D2:F2:2A:9D:1B:60:D3:34
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F4FC8CD0E3238C817E6600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5d477749-a47c-39c9-b8b4-871d2078f5df.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:fc:8c:d0:e3:23:8c:81:7e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=fe7d0fdd-a6a2-4785-9864-b0b4a5195bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1e:26:e1:6b:6e:05:92:ec:02:63:32:f3:27:
                    f6:07:73:d6:d4:ea:55:e4:af:e1:0e:ce:b7:6f:26:
                    4f:0a:a5:ec:14:a9:b3:2d:cc:f3:ef:17:77:78:f7:
                    14:b5:11:1c:3d:56:81:3d:a3:36:59:fb:e7:e1:a6:
                    9b:8e:3e:44:8b:7c:02:33:e4:51:23:d3:ac:e6:ec:
                    b5:77:43:6d:09:d1:0a:3c:ae:e8:30:19:2d:12:69:
                    c7:99:1f:1c:41:d0:31:6c:de:73:dc:ad:45:cf:77:
                    30:a4:5c:75:05:cc:79:83:b4:5e:49:d3:b8:3b:55:
                    56:0f:2e:59:25:b8:79:56:8a:b5:db:70:75:b3:90:
                    b3:e9:98:98:e6:93:41:0a:da:f3:c2:55:e3:55:d7:
                    98:1c:20:98:ae:9c:b1:dc:26:92:75:93:70:7a:69:
                    b9:e3:16:03:e7:2f:be:f7:0c:89:77:b4:e1:14:fe:
                    94:ad:76:8e:fc:b6:b4:d5:73:63:80:fb:d8:98:3e:
                    5e:63:8b:58:6c:5e:27:88:c2:26:8d:65:c5:b7:06:
                    c2:96:41:b3:cf:61:ea:18:b2:4a:ce:91:d6:4c:df:
                    3f:eb:99:ad:cd:56:65:52:d5:1b:76:2e:e2:14:81:
                    e8:79:c8:21:6c:da:9b:74:dd:37:ca:9e:a0:53:35:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:08:52:BF:25:E1:9A:2C:C5:02:95:D2:F2:2A:9D:1B:60:D3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5d477749-a47c-39c9-b8b4-871d2078f5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:21:65:ff:b2:ce:e1:e3:6a:89:66:65:80:f8:ed:9d:d0:
         61:2c:ae:a3:52:10:b1:b4:af:17:30:c0:01:f5:ba:0f:1c:91:
         9b:bb:99:bc:82:52:7f:05:f1:4a:f4:a4:66:d7:3b:68:77:30:
         e6:55:52:98:97:5f:ad:ef:f3:f9:5a:1b:f5:b8:dd:a1:8d:f3:
         61:ae:57:82:a8:b9:b8:b6:f7:87:a4:1c:73:e2:a1:d7:ee:b4:
         10:b9:83:b8:62:f7:4a:5d:db:10:fd:a4:9b:c9:70:f9:a7:52:
         3c:bc:32:a0:87:33:4c:a4:18:e4:61:ef:8d:7a:76:ef:f6:af:
         4b:1c:27:0f:d7:5d:5d:89:93:49:4c:31:50:21:db:01:15:40:
         05:bf:6f:2d:4e:1b:47:28:50:72:b6:03:73:72:18:77:46:be:
         e1:fe:04:c2:47:c0:78:05:88:b1:8b:0b:65:dd:1a:44:9d:6a:
         ba:1c:28:9a:ef:dd:e7:d8:a6:c7:19:ed:cb:19:dd:4d:c8:5e:
         9a:e7:67:12:f6:90:98:49:08:b2:b7:cf:97:ed:aa:24:29:4e:
         2d:9f:64:0f:de:4d:10:74:ee:4c:bf:30:a7:72:2b:a9:de:c1:
         cb:8f:24:88:54:61:66:96:9e:52:76:64:a4:7d:43:1b:c8:1a:
         5d:85:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:32 2024 by rpki-client on console-ams.rpki-client.org