Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ede53944-ad76-3616-94b5-7555b1d619f7.roa
File:                     ede53944-ad76-3616-94b5-7555b1d619f7.roa (raw, json)
Hash identifier:          ITKynyxOY71QBhd9nyr1bIu67zynDbEiZ0pyoB+EQsA=
Subject key identifier:   5F:59:32:D9:2B:E7:0D:90:23:D6:89:29:B5:4C:51:44:E4:EA:F5:B5
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F432858471E7068D95C5A07A89822D440
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ede53944-ad76-3616-94b5-7555b1d619f7.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     33139
IP address blocks:        67.55.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:68:d9:5c:5a:07:a8:98:22:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=eccbe874-da22-42de-9a37-3c51847af6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:27:84:aa:3e:96:db:5b:d2:bc:fb:54:bb:
                    50:56:2b:8b:aa:f7:92:a4:4c:dd:f2:a6:ef:27:4f:
                    e1:aa:0e:e8:3c:7f:c2:a6:d9:5f:2a:71:b3:bf:3d:
                    8a:a9:42:4c:82:c3:bf:59:4c:4d:30:c2:24:bf:ad:
                    9f:d2:7a:64:1b:df:c9:a5:63:8a:e3:d0:52:14:f8:
                    ab:3a:de:fa:f0:65:a6:27:8a:3d:90:ee:f3:65:38:
                    1d:95:6f:a8:fb:7e:a9:9f:1f:6b:66:0a:21:16:17:
                    f8:5a:47:86:f7:03:d0:d6:e9:d4:7e:a2:46:d7:c0:
                    49:0a:3a:2f:85:47:57:72:eb:8f:26:08:b7:e0:47:
                    eb:03:5c:ea:af:7f:02:47:50:08:92:91:3b:1b:ba:
                    46:ea:39:a4:26:36:0a:07:5b:77:7a:5d:4b:95:d3:
                    81:58:06:55:80:ab:67:0d:53:72:e3:ec:99:f7:f5:
                    46:04:1b:5c:4c:7e:ba:8c:f9:ca:f4:fb:94:b9:d6:
                    e7:f7:6a:0b:72:df:95:ba:9a:90:74:9c:ba:6c:2f:
                    d0:d0:65:02:ea:a6:e9:4a:17:e8:dd:0b:f2:8b:6a:
                    dd:a7:1f:bc:c0:d7:78:9c:c2:82:1d:74:be:97:54:
                    9b:df:da:69:76:6e:fe:9a:9c:93:f5:1d:5d:b2:d6:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:32:D9:2B:E7:0D:90:23:D6:89:29:B5:4C:51:44:E4:EA:F5:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ede53944-ad76-3616-94b5-7555b1d619f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.55.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:96:4f:d2:73:09:53:36:fd:b7:7e:5b:d0:e5:aa:3b:ff:fd:
         67:76:1e:53:1a:6c:c5:7f:f8:95:ef:21:f0:4a:ca:90:87:93:
         f6:f0:a7:4a:20:8f:09:2c:ec:e7:f5:f3:fc:b9:ec:7b:f5:dd:
         6d:fa:37:fd:39:9f:3d:db:6e:b2:05:be:0d:5c:2d:58:81:da:
         df:c2:ec:99:52:92:eb:88:d0:1b:5f:c1:b9:e4:9b:65:b7:a8:
         97:42:d4:97:da:e0:2b:26:3b:53:3f:62:d6:37:d5:7c:b9:97:
         ff:12:03:74:95:a9:15:63:d5:eb:cc:78:24:35:82:4c:b6:9a:
         7e:ef:0a:29:6d:c4:2f:7a:08:f2:73:44:84:a8:52:34:c4:85:
         d9:7e:21:4b:da:c6:c5:77:e1:9e:1d:fb:91:1d:fd:8b:87:52:
         02:37:fe:13:f9:87:c1:39:0e:76:f2:37:41:d7:2f:c1:02:da:
         1b:f4:44:ec:47:15:fa:e1:30:27:17:d9:1c:cc:ec:b6:ba:b2:
         24:21:4b:68:40:79:65:30:15:ca:8e:6f:92:06:a6:5b:4d:5e:
         96:7a:a7:aa:45:a6:0c:b2:15:fe:a0:62:84:0b:98:f7:80:b2:
         1f:2b:0a:8c:f9:7a:2c:23:fd:81:a1:5e:34:10:3a:21:df:65:
         5d:e0:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:39 2024 by rpki-client on console-ams.rpki-client.org