Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/1cd26a00-a267-37e5-9186-b99df2ae9fa7.roa
File:                     1cd26a00-a267-37e5-9186-b99df2ae9fa7.roa (raw, json)
Hash identifier:          WxIunouZeIO99boOFsVDSQRV/oP8YaN2hw46QfUeZvc=
Subject key identifier:   E5:CD:95:38:F5:B3:40:83:24:5B:72:57:65:C9:F9:6E:99:A0:FD:5E
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EAFA767BBC790B8D2480
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/1cd26a00-a267-37e5-9186-b99df2ae9fa7.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        64.37.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:fa:76:7b:bc:79:0b:8d:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c3fa704e-bc81-487e-88e2-a68a988ae44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:07:ef:43:64:69:90:44:1d:4f:07:d2:15:
                    25:19:8a:e2:e8:f3:1d:03:57:23:df:b2:12:65:4a:
                    d1:ff:b1:d6:fd:40:b4:11:cf:f6:cc:b5:06:7f:84:
                    e0:b7:be:a2:d8:fa:d3:41:ce:15:b9:a5:5d:c2:98:
                    a5:81:ff:6e:9c:3d:20:d8:d1:04:50:63:7e:54:ce:
                    62:f1:0c:3d:05:09:8c:fd:f7:f9:bb:3f:bf:dd:7b:
                    1c:80:f7:96:88:60:56:44:4a:c6:c5:a4:c5:6f:2b:
                    fa:ca:67:8d:15:68:48:56:b6:d2:43:00:9b:f3:58:
                    78:e3:90:e5:bd:5c:78:3d:af:ff:07:71:8d:7c:e3:
                    f9:43:9a:15:52:04:25:11:11:a0:f2:0a:45:34:56:
                    86:ac:e9:26:1d:b6:6b:9d:ce:a7:ba:95:9e:c5:f1:
                    e4:1c:d8:92:fe:9e:20:62:74:92:ea:b7:ad:57:30:
                    9f:23:16:30:4f:8d:0e:de:06:b0:72:2f:d4:5a:a1:
                    f7:f3:ef:8e:9d:ba:d9:bf:33:df:d3:fb:71:15:c8:
                    78:e7:0a:75:c2:2a:1a:98:25:5e:2f:ee:38:73:ac:
                    4c:69:0e:58:a4:a7:bb:21:2a:9c:ea:9c:50:9b:b7:
                    3d:c6:da:a1:04:74:d0:b3:9b:3b:8c:ff:7d:38:c9:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CD:95:38:F5:B3:40:83:24:5B:72:57:65:C9:F9:6E:99:A0:FD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/1cd26a00-a267-37e5-9186-b99df2ae9fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:56:1a:6e:bd:d9:81:bd:81:77:0c:33:fe:ed:3d:2b:d0:8e:
         5b:f2:ff:41:89:88:83:e2:ca:8c:cf:95:13:79:69:05:1c:35:
         60:9f:a3:df:a4:1f:5f:da:e0:2c:cc:70:83:09:cc:fa:c9:7d:
         a5:a7:43:57:e3:9e:3e:79:24:9e:e3:3e:65:f9:f7:95:f4:fe:
         f0:e6:fe:bf:68:f9:5c:2b:85:be:9d:dd:e3:ff:72:ba:9b:51:
         24:be:73:8e:32:f0:d9:27:3c:27:a0:3e:4e:0a:dd:d9:8f:6b:
         13:95:19:24:cc:f5:3e:35:38:29:0f:d6:8a:75:a1:83:3b:03:
         b9:d2:fd:3b:b5:d2:37:e3:a1:35:76:72:a9:4a:1f:53:55:23:
         93:60:c1:29:6a:4b:b6:0f:0a:50:74:00:01:c4:99:8b:0c:55:
         a8:dc:26:a9:0d:67:b1:d7:32:4c:57:b4:80:2c:15:c1:72:28:
         bb:2b:e1:7d:83:19:6d:d2:a5:dd:1c:c1:12:7b:4e:5f:01:f0:
         5d:f0:09:de:ac:60:6d:34:e0:62:78:d9:59:3c:2f:17:4c:3b:
         98:6f:a6:4f:c2:e3:4e:ae:40:59:23:c3:88:3a:62:bb:6a:cf:
         d0:4b:db:db:b7:9c:41:ec:69:d6:1a:b9:0f:57:1a:3d:e3:76:
         eb:a5:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:41:06 2024 by rpki-client on console-fra.rpki-client.org