Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
File:                     4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa (raw, json)
Hash identifier:          0lv1mOY3D+WitCbCofCu+uM3W9Lmckjwhk68KXFutwQ=
Subject key identifier:   FF:03:78:D9:E0:7A:84:E3:B8:88:86:EF:6A:86:5E:57:7F:15:C4:06
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F43285847C3448D7A68E9EF463E971880
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     21699
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          45.45.240.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
                          2602:fe6b::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8d:7a:68:e9:ef:46:3e:97:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=3694ceba-7cae-4838-8f2c-9dc9111a69a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:71:81:85:ab:52:7a:1d:d9:88:51:0b:fe:
                    34:eb:b8:5a:4d:2e:6e:08:92:80:ae:8c:a3:5e:f7:
                    1d:dd:b0:11:87:72:b3:f8:5f:d6:30:96:19:b1:50:
                    2e:b7:06:88:09:01:e6:6f:f4:8d:5a:7d:75:f8:7e:
                    80:8d:f8:69:ad:fa:c3:36:e7:56:a0:fa:b4:36:fe:
                    85:20:48:d1:c4:7c:a0:89:8d:73:4b:b9:52:2f:47:
                    78:5b:14:09:90:66:63:b4:22:c6:77:94:dd:d2:ae:
                    e3:9c:dc:e0:ab:f4:3e:4c:79:2a:c3:7f:a0:3b:60:
                    08:ba:52:70:8f:4c:7a:4b:1a:b6:b7:9d:91:13:2e:
                    13:21:e0:bd:87:16:21:ac:f6:f6:55:1f:1b:b2:29:
                    c9:07:6b:d6:2c:da:71:f8:78:de:b9:c5:49:b2:ba:
                    16:f8:1f:17:a5:d2:58:e5:31:34:6c:fd:1d:21:b3:
                    24:c0:06:76:54:69:13:2d:ad:86:42:dc:bd:8e:37:
                    aa:e2:45:a2:44:fc:3c:8a:c5:03:c2:a6:ab:60:ef:
                    5e:63:59:86:cd:36:9e:93:bf:ee:80:b6:ea:de:49:
                    ab:a3:e1:74:02:10:33:1e:50:f8:9b:1c:3f:a0:de:
                    7b:a3:6e:34:03:09:0c:60:98:5a:73:cf:5b:83:04:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:78:D9:E0:7A:84:E3:B8:88:86:EF:6A:86:5E:57:7F:15:C4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  45.45.240.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22
                IPv6:
                  2602:fe6b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:92:15:8c:22:b0:8b:f9:10:da:d9:97:c3:c7:70:6e:73:
         b9:59:41:5d:51:89:2a:af:76:ce:ab:69:51:25:a9:f4:10:b1:
         8b:15:b5:52:31:43:d9:ba:82:b1:bf:a5:53:16:bc:01:54:16:
         5b:b8:29:41:95:87:6e:50:14:d6:f3:c4:02:c8:9c:c4:25:9b:
         c5:1c:36:dc:60:d7:a1:37:37:57:ce:91:0d:65:44:b1:ce:27:
         e6:71:5e:cf:d5:74:e0:ea:f9:fc:48:da:3f:51:43:7e:bd:98:
         44:92:46:69:05:ac:0f:86:ec:b3:6a:64:8c:ef:5a:e5:d7:21:
         6b:ef:d1:5c:6f:16:78:bf:2a:fd:88:9d:c3:b8:bf:7e:b3:94:
         33:e3:b1:73:c8:69:5d:80:03:f8:18:17:64:6a:67:0a:cb:9a:
         46:57:f7:96:06:96:27:20:96:1d:f5:60:0f:e3:28:2c:2d:a4:
         dd:6b:bb:ed:75:1d:ea:b5:fa:54:f5:42:b6:7c:2d:29:f9:8b:
         77:8d:fc:df:ac:c7:11:83:ad:eb:92:29:af:7a:68:a0:7e:12:
         49:5f:8e:76:37:7e:77:03:69:fe:08:40:75:87:ca:22:ea:39:
         eb:83:da:0e:e7:76:2c:43:4d:a8:3d:ed:96:d2:38:18:ae:1a:
         97:20:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org