Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
File:                     14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json)
Hash identifier:          AJkSOSbr2f8fB/64gnJqhE0QQZ9VqdF4MFG3OmXwQZE=
Subject key identifier:   E1:CF:99:35:AE:21:17:15:2C:3F:EA:0A:78:25:A6:CD:20:B9:E4:EA
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F432858484515946D683E0D84EBF44C00
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:94:6d:68:3e:0d:84:eb:f4:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=9cd09b88-64a7-4323-9327-c7c2ab698c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:2d:a8:9c:a0:cb:ed:25:03:85:59:99:c8:
                    6e:a6:55:11:35:fc:31:ff:1a:5d:8a:ed:2a:a5:29:
                    e7:c4:64:04:51:65:72:76:2b:03:6f:7e:95:51:e2:
                    14:60:52:0e:f4:1f:71:51:aa:9b:72:ff:0b:1a:9b:
                    1f:0f:fc:8e:de:40:6a:5a:dd:33:26:51:eb:96:99:
                    c4:c6:b8:69:76:78:48:72:5f:91:cf:67:e8:cc:7e:
                    4a:dc:7c:11:40:f7:5f:10:99:40:a2:17:35:34:0b:
                    f0:a7:9f:93:a2:41:64:9e:dd:b9:12:6d:f4:e6:1f:
                    e4:88:1b:60:e0:fa:81:a6:de:d0:c5:1f:d5:47:cd:
                    45:34:1d:b8:54:d7:2b:32:31:29:74:69:34:51:04:
                    aa:e2:fe:f3:22:f5:d1:95:ba:54:9b:bc:b4:05:fb:
                    89:03:a5:01:29:13:c9:37:b5:a9:5a:76:e2:47:cf:
                    ff:99:59:6a:8e:6b:2f:66:6f:af:2d:20:23:32:db:
                    f2:d1:c7:46:2b:5e:5e:ac:79:14:b0:39:52:72:bb:
                    bb:00:6f:93:5c:36:2e:6e:9a:9c:1c:c8:a6:78:01:
                    90:5e:11:ea:ed:28:42:5b:f8:9d:7d:55:bb:ef:37:
                    ca:01:db:3b:d3:5e:10:23:91:07:ea:5a:9a:2c:31:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CF:99:35:AE:21:17:15:2C:3F:EA:0A:78:25:A6:CD:20:B9:E4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:a0:71:61:6e:d1:29:be:65:fa:fe:fa:6a:22:96:a9:37:
         25:71:93:0a:a4:75:91:e7:e0:d2:ae:1d:cb:ad:0d:ea:09:53:
         2f:b2:06:3a:a1:6d:b5:79:72:74:4d:2b:8a:71:11:3c:d8:91:
         df:87:2e:fc:3e:e5:aa:0f:c5:e2:b1:85:de:20:1e:52:1d:b6:
         66:8d:13:e5:94:d4:7a:64:3f:f4:34:07:de:1a:18:f8:ce:0b:
         86:d7:03:f5:0b:61:2e:57:34:4d:e7:02:af:aa:38:47:ab:49:
         8c:40:72:a0:f3:1d:21:9f:68:bc:d2:74:54:1b:88:6b:18:e8:
         08:eb:4e:a8:48:21:f1:9d:3a:0b:ae:85:26:a0:db:36:2a:da:
         9b:4b:0f:45:3c:16:4f:d6:a7:1b:db:d0:8d:94:34:14:67:cf:
         b5:50:20:88:86:00:e3:56:01:ec:0b:b7:6f:dd:1e:55:52:04:
         a6:75:d0:ed:c3:1d:99:00:e2:67:ac:91:30:6b:bf:dc:7b:a9:
         ea:86:2c:b2:ec:f8:40:3a:b5:88:41:eb:66:03:30:e7:53:89:
         00:56:73:ca:81:d6:61:db:ff:b7:7b:88:07:f4:64:db:2c:63:
         1a:29:c8:05:24:60:31:76:f0:f1:eb:e8:f9:f4:6f:cb:45:bc:
         da:bd:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:52 2025 by rpki-client