Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa
File:                     d5df5c49-0f8b-38f1-a00c-26bf75577520.roa (raw, json)
Hash identifier:          seA0Bzvbzsn1C+95k/qhqGZEO1Rx8iu38PvJrkLS1yM=
Subject key identifier:   97:EF:01:C2:90:B0:69:96:13:12:7A:17:AE:71:B5:D1:F4:43:73:25
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F432858473FF09044A311C9C7ADB89C80
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     7018
IP address blocks:        95.143.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:90:44:a3:11:c9:c7:ad:b8:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=10f4af9d-36e4-45fd-9bbd-5a26a0060064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:cb:30:9c:6a:d7:1f:ca:a2:d7:12:af:3d:
                    d4:cf:2d:9c:0d:76:86:58:96:0b:ea:a9:ce:22:94:
                    3c:48:51:12:f8:a3:19:03:22:25:c9:ed:36:80:aa:
                    d0:7b:0a:09:81:37:c7:bb:22:85:53:12:c4:9e:2a:
                    95:16:9e:ef:61:8b:d4:0a:11:26:3b:c7:a5:5f:55:
                    c9:14:6e:e3:b5:a9:e0:56:53:5d:34:dd:7b:db:72:
                    b3:2e:83:2b:ba:48:10:2f:d3:e0:c2:c8:93:16:45:
                    84:e8:c1:d7:8b:f5:57:4b:2f:a0:f8:c2:bf:b9:0a:
                    da:2d:72:f9:36:f2:64:53:cf:e6:65:b5:20:06:f5:
                    0c:7f:c7:3d:12:aa:19:0b:a5:d0:5d:3e:8d:5e:0e:
                    55:17:88:7a:80:11:02:3f:2f:22:5f:da:24:10:20:
                    f1:fa:8c:ea:18:78:c5:9e:e5:67:fa:ac:4b:d1:37:
                    63:91:73:c2:2c:eb:e8:48:ab:b7:60:91:f4:df:d3:
                    42:1b:05:a6:0e:08:cb:37:aa:94:72:9b:3f:b9:6a:
                    dd:6d:6f:70:93:c3:dd:bc:57:90:b8:0a:02:3c:35:
                    08:31:e5:21:23:2c:e4:ce:e0:cd:2c:34:f4:44:c7:
                    cd:50:55:0f:9f:e9:7e:a9:ef:f6:05:d9:34:80:2b:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EF:01:C2:90:B0:69:96:13:12:7A:17:AE:71:B5:D1:F4:43:73:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:84:c1:62:a0:df:1b:fc:df:0a:b5:1d:3d:19:31:63:fb:19:
         22:2b:0b:1e:6c:68:c5:e1:e9:c8:64:bf:7e:74:85:b5:43:47:
         b4:50:7e:31:c3:df:fd:4e:f7:9e:40:2f:03:8a:68:be:47:b7:
         da:75:e8:99:21:2d:cd:b0:8a:97:23:e3:3d:a0:38:f3:f5:ed:
         58:39:a9:c1:2c:f1:81:ad:20:ce:1c:e9:e0:3b:c6:db:34:1f:
         12:59:f1:2d:75:a3:35:a7:b1:40:87:a7:2a:b8:9c:82:ed:ed:
         a8:3a:53:61:a2:96:6b:7f:c3:53:7d:5b:26:b8:25:04:1a:df:
         a9:89:44:70:d7:d8:84:fc:d5:16:ab:42:9c:3a:f2:79:d8:84:
         77:4a:aa:c1:02:90:d0:48:a1:4c:41:5a:60:c8:ae:37:8d:4b:
         ca:41:53:1d:0d:4e:27:fd:9c:bc:4f:a0:8b:22:39:ee:2e:bf:
         37:e7:3d:76:4e:70:a1:af:61:e2:ff:24:41:5d:26:bc:42:6e:
         f6:b5:c6:b0:d7:e3:8a:ee:65:fc:bd:47:33:63:32:ff:92:59:
         04:23:1a:f2:ad:f3:fc:d6:35:42:c5:49:c8:35:9d:9d:a1:2a:
         20:8c:57:c9:c1:7d:a0:f3:a3:f0:bc:bd:24:1e:e3:79:22:24:
         22:d2:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:52 2024 by rpki-client on console-fra.rpki-client.org