Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
File:                     8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa (raw, json)
Hash identifier:          uzPi/woeCjPUZBcyLLD9yNuwA1qH6QBPdW/7DKbO4Ak=
Subject key identifier:   72:87:2D:D0:6C:F0:44:2C:F4:DD:4A:98:0D:A6:E1:B2:35:6C:7D:95
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490111302240CA789ABF2D40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
Signing time:             Thu 21 Mar 2024 21:22:14 +0000
ROA not before:           Thu 21 Mar 2024 21:22:14 +0000
ROA not after:            Wed 19 Jun 2024 21:22:14 +0000
asID:                     36492
IP address blocks:        64.9.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:01:11:30:22:40:ca:78:9a:bf:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:22:14 2024 GMT
            Not After : Jun 19 21:22:14 2024 GMT
        Subject: CN=37e73b4b-a875-4cf6-81f2-48f34697dc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:1b:31:77:45:b9:d5:4d:8c:45:58:52:cb:
                    2b:f5:8c:19:ed:6c:d0:9f:5e:75:12:95:6d:bc:ce:
                    22:b9:66:eb:25:63:7e:0e:03:68:f1:fb:05:96:1c:
                    5c:cf:09:a3:5c:03:8e:9e:a9:90:68:ca:bd:86:ec:
                    bf:cc:7f:6b:20:5b:7e:19:ea:dd:e1:09:b1:09:04:
                    e7:09:ec:66:62:7b:42:f6:a8:95:c2:fa:a7:5d:10:
                    2e:42:8e:10:6c:a6:f5:9d:27:b3:ef:45:9a:d7:08:
                    ad:2a:41:e4:2f:3b:a3:db:5e:be:eb:26:e0:07:3a:
                    37:4b:97:93:c0:c5:57:80:eb:8d:c0:45:a6:39:64:
                    31:ee:81:f8:d8:31:05:ba:66:c5:8d:d5:1d:29:a2:
                    ba:af:a3:dc:0e:88:7a:45:7c:af:8e:69:f2:fa:bf:
                    2f:04:35:2b:2e:05:0b:80:02:45:9a:05:7a:54:58:
                    da:15:68:d8:cb:28:9a:35:fd:49:aa:77:3b:43:f0:
                    e4:f6:c4:ff:49:9d:db:31:df:84:8a:fd:a2:ec:63:
                    c1:56:bd:04:84:7b:f8:cc:8a:f9:c0:76:8d:ae:03:
                    c3:89:f0:62:50:25:ba:06:85:1a:25:17:28:04:b9:
                    2b:b9:b7:3c:37:a9:8b:58:52:39:dc:b4:44:10:3f:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:2D:D0:6C:F0:44:2C:F4:DD:4A:98:0D:A6:E1:B2:35:6C:7D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:47:c2:ab:62:aa:5d:de:fa:e5:2b:34:01:43:b3:e4:9d:
         83:09:6d:65:db:bc:8b:23:9c:88:04:ef:b4:ed:ca:e5:41:90:
         3c:dd:e6:85:92:d4:5b:40:97:e1:c1:8d:11:06:40:7d:ea:2c:
         a7:d6:29:52:38:43:ad:7d:4d:9e:3b:89:48:be:c7:48:6d:83:
         0a:0a:08:6d:7a:08:d6:88:9b:18:ab:09:96:76:35:d6:24:61:
         98:b4:03:25:f3:24:b6:72:28:d8:f9:45:95:aa:cc:b9:e5:34:
         d8:be:1c:fc:4f:8f:c7:09:30:5c:4c:b6:65:f1:f4:42:d8:96:
         e9:7a:6c:8e:cf:cc:40:e6:3a:53:fd:ad:17:e5:b5:98:e8:04:
         08:43:1f:ab:aa:af:95:28:59:8a:99:68:84:46:a2:5a:b6:7a:
         29:1c:dd:bc:37:3f:b0:fa:e2:5d:46:19:1d:89:d9:ca:f5:32:
         f6:83:fa:c0:cc:47:f5:df:28:ae:04:c4:82:8d:16:f3:00:71:
         ee:08:ba:77:19:44:df:f4:99:f5:8e:88:de:d7:fa:01:42:f0:
         b0:26:62:a0:f6:83:b1:c3:6b:0f:98:7a:26:87:96:f7:1b:58:
         7b:d0:62:6c:e9:cd:69:01:a2:04:3c:43:30:e1:4b:52:51:53:
         bc:f3:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:22 2024 by rpki-client on console-ams.rpki-client.org