Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa
File:                     fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa (raw, json)
Hash identifier:          sez13aCqf3sRxVOJdqjYA/jjOzv8s93pm7LkdWUQQag=
Subject key identifier:   C4:6F:44:C2:2D:EF:5B:10:99:14:20:39:DE:35:84:93:2E:87:9C:30
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F5191146BAC6EDB53924C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:19:11:46:ba:c6:ed:b5:39:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=d3c9b936-2f37-445a-889f-1a0e243e3ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:17:1a:70:04:a2:9e:33:44:12:51:2a:5b:
                    ef:ee:f7:e1:72:00:ff:f6:92:03:f2:a3:1d:20:fe:
                    32:11:97:c4:fa:b6:fd:e4:5f:03:52:e6:6a:9c:7a:
                    19:e3:e6:0a:4b:82:ca:7c:c9:6c:7d:73:03:61:a8:
                    38:d0:c0:6e:f4:03:c3:94:1c:ea:27:6f:de:19:00:
                    e5:22:00:e5:9d:75:da:ce:9e:4e:2f:3d:7b:18:e1:
                    67:e9:bf:3c:44:c3:12:ca:df:8c:be:47:a6:34:e2:
                    ad:d6:2f:99:3b:54:e7:a9:72:1e:48:19:19:21:e5:
                    9f:d7:e0:24:9e:c6:f0:14:c6:ca:ae:e9:eb:65:2d:
                    18:f8:81:8e:43:40:55:fe:8e:05:ad:d5:bf:2c:7f:
                    c9:c4:05:26:6a:1c:1f:85:6f:a7:81:ed:8c:fc:d2:
                    35:66:83:ef:e3:53:05:eb:ae:e7:e6:3e:b1:76:4a:
                    bc:4f:af:e0:b4:13:04:3b:a7:03:15:5c:4d:d1:a3:
                    9f:a8:31:d1:99:d0:fd:ab:b6:5f:1a:e1:74:c7:71:
                    46:6f:ed:86:20:04:28:6b:db:47:4e:8f:b9:f7:a2:
                    13:b3:bc:59:12:57:fe:ae:58:d1:08:bb:7c:bc:9e:
                    b1:6e:3e:d9:9d:4e:8b:69:36:31:cd:0f:36:8a:5d:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:44:C2:2D:EF:5B:10:99:14:20:39:DE:35:84:93:2E:87:9C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:67:1f:d4:74:1f:4a:cf:43:68:8e:38:48:54:9d:ab:28:
         96:99:3b:84:01:be:58:2c:95:02:c3:dd:16:a5:15:34:7e:a2:
         1c:f1:3f:38:55:7a:c9:5a:f1:c7:b7:09:62:59:ed:3d:2d:04:
         3c:bb:a1:2f:2d:96:34:60:e6:66:ed:67:8c:da:3d:99:95:83:
         46:f1:9f:04:bc:e0:5a:74:ee:ba:dc:a9:e8:c8:3f:42:31:60:
         bd:10:95:a4:b0:6f:04:e3:75:cc:35:bf:ba:c1:f3:cc:ef:ca:
         39:62:43:bc:af:49:17:ee:fe:a2:bb:76:13:b7:d1:9b:67:ed:
         5a:ed:8a:f0:46:2b:05:8a:b0:b7:75:ac:bc:bd:d6:95:80:f2:
         a2:be:ab:d8:10:37:fe:3e:cc:59:07:5e:51:31:c0:29:a6:f4:
         6b:e3:c8:42:60:e2:73:4c:3c:af:a9:cf:97:3d:29:7d:83:56:
         46:0f:50:ca:86:84:e6:29:c8:c6:b0:76:bd:b4:70:17:6c:1b:
         9c:81:2f:78:d7:67:88:30:fe:6a:c5:f6:06:78:e3:db:dd:93:
         76:18:77:38:92:11:73:3a:3e:7f:5a:22:ab:05:83:ba:e1:9e:
         3e:fd:da:ed:75:e1:a3:cc:f6:b2:60:61:eb:99:ce:bd:5c:f9:
         3b:51:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:33 2024 by rpki-client on console-ams.rpki-client.org