Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
File:                     c41a86d5-a591-3154-84bc-09af501607e7.roa (raw, json)
Hash identifier:          GLbBMqWoEfq6aInW1fOrVILNB/o5WM7fLS+T91b545w=
Subject key identifier:   21:62:2C:DE:CB:85:2E:DE:49:41:DA:72:ED:0F:DA:66:9D:4F:46:E3
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584762D64F80E4F1F7663D2C6080
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        172.110.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4f:80:e4:f1:f7:66:3d:2c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7bbd4209-e8bc-4a82-bff8-12d988d13674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:49:a0:36:48:e2:9b:fe:8d:d1:75:65:89:
                    5f:dd:ee:53:32:79:c0:14:59:68:1a:2f:22:e7:fb:
                    95:f9:29:d4:cb:90:29:72:a9:34:b6:69:dc:1b:54:
                    58:c5:6f:1c:62:eb:01:e9:28:12:8c:d8:0a:b9:7e:
                    11:36:38:95:59:f7:be:83:d9:ad:97:d1:4f:05:e7:
                    23:23:f5:46:94:64:8f:6e:53:d1:60:b0:da:b0:17:
                    b9:0f:75:59:fa:ff:f5:22:cd:73:ae:63:74:93:c8:
                    0a:00:e0:80:4d:1b:dd:3c:b8:3f:ec:e8:6f:82:3f:
                    75:14:28:ec:ec:9c:bf:c6:23:67:f2:92:c4:51:a0:
                    18:5f:9a:01:59:45:17:9b:e8:26:7e:82:1b:53:01:
                    b8:c4:a9:db:8e:cb:90:9b:05:a6:5d:2c:1a:03:47:
                    96:3b:dd:2c:03:ab:c1:29:03:6b:8d:c7:5c:ba:53:
                    26:35:21:91:db:3d:f9:3a:fe:7e:e6:ab:d4:fc:63:
                    90:00:7e:9f:66:ac:a7:0e:da:6a:78:cb:b3:8e:34:
                    16:18:55:90:f0:6d:07:13:c7:42:26:23:49:a9:dd:
                    9a:52:41:1f:34:1e:47:0f:0b:c9:c9:91:c0:18:17:
                    13:a2:8e:42:2a:43:a1:1a:49:ad:1d:e5:1f:30:be:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:2C:DE:CB:85:2E:DE:49:41:DA:72:ED:0F:DA:66:9D:4F:46:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:de:f8:50:b1:cc:68:0a:d9:99:31:b5:14:95:28:9e:2c:
         c1:5f:5f:ae:19:12:8f:6a:0f:93:27:11:e9:ea:22:06:da:4f:
         75:08:34:8d:44:b1:e6:d5:12:b2:97:c3:02:24:f9:82:8c:31:
         4a:99:de:95:d3:7f:a6:bb:09:9d:fe:d0:d9:88:72:17:4b:35:
         76:a8:c3:f7:5d:c6:d7:d9:e3:df:26:a3:b3:fb:1f:6f:46:b5:
         78:72:3b:a2:93:f2:d9:36:20:b1:0b:b9:18:ab:9d:f1:91:07:
         d0:17:db:1b:e2:ee:ad:13:36:8c:d6:79:f5:15:f7:59:33:0c:
         ee:d3:55:6f:e2:c8:8b:4a:89:f5:68:f5:53:2f:a7:37:98:2e:
         24:c0:ab:a3:8c:8f:24:7c:47:cd:91:95:a7:9c:12:e3:60:82:
         73:67:e4:ed:0d:05:e3:b4:80:51:25:5e:1c:d1:27:34:e1:a2:
         78:0f:fb:f5:c8:94:dd:78:d6:d0:27:cf:c9:16:31:f6:01:2d:
         52:98:7a:7c:40:c3:72:ca:fc:37:e9:ea:c6:94:85:3a:9e:ad:
         19:77:4d:9c:f0:db:ff:ae:3a:29:84:14:1c:31:31:a0:81:bd:
         0f:b7:98:ef:74:2c:42:6f:d0:1c:cf:1e:14:b0:6a:8d:3f:9e:
         f6:34:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org