Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
File:                     e277ca94-a552-3ae1-979e-0ca00fd433c9.roa (raw, json)
Hash identifier:          hC6o/L1ZcUtFu8Mp114+R0afYpIBpIfRFy/nhjlxt68=
Subject key identifier:   3D:11:29:21:8C:3F:A0:07:1C:C0:0C:98:47:A7:8D:E2:A8:C4:81:83
Certificate issuer:       /CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
Certificate serial:       010D0C9F4328584789EC017863C6DFE980886400
Authority key identifier: 58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     13692
IP address blocks:        64.29.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:01:78:63:c6:df:e9:80:88:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=8623d4b6-c37b-48cb-97c5-71d3d2287bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:ff:c5:0c:6e:91:03:3b:51:03:c2:d3:67:
                    4b:39:fe:93:6a:77:3c:5f:34:8a:25:92:6f:17:26:
                    80:65:db:16:f1:e2:fc:2a:2d:95:ba:da:ff:4a:76:
                    8f:07:32:dc:eb:ca:5a:d7:f6:df:8d:a4:35:3e:89:
                    3b:4b:6e:68:8c:bc:71:f4:60:27:20:44:62:12:c7:
                    cd:89:28:1f:cd:b5:0f:67:9d:22:1f:db:4e:0e:1b:
                    1e:b7:1f:85:5c:32:29:1e:69:34:81:3b:f9:54:5c:
                    7c:83:d5:3c:5f:fe:0d:42:4e:37:36:0d:18:d7:42:
                    15:4c:16:a9:20:d7:ca:16:67:4f:7d:73:cd:41:e8:
                    3b:67:c8:eb:9e:d2:cb:f8:3f:fa:ee:12:92:d4:0d:
                    ea:99:bd:bf:45:6f:b0:26:47:b2:b1:06:7b:f4:98:
                    38:8c:82:1e:e1:2e:5e:39:de:53:1e:dd:90:9a:d5:
                    71:b5:e3:d3:48:fc:b5:f3:00:51:22:cd:9b:3e:a3:
                    b0:6f:2d:50:f1:2c:59:e4:87:bd:53:48:4d:6c:0b:
                    85:18:78:fc:84:5d:71:94:ec:55:c0:34:8a:f6:5f:
                    16:90:64:ab:9f:62:80:10:73:9a:d8:23:2e:7a:48:
                    2f:12:ef:1f:49:09:ee:39:ba:51:ad:e1:2f:ce:00:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:29:21:8C:3F:A0:07:1C:C0:0C:98:47:A7:8D:E2:A8:C4:81:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl

            X509v3 Authority Key Identifier:
                keyid:58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:be:9a:ed:0d:34:ed:c1:f8:ae:1b:a6:f9:6f:93:4f:c1:4a:
         ab:af:fd:30:0f:f7:77:de:38:91:58:dd:a6:dc:8a:5a:35:ee:
         0d:14:93:53:5a:2a:aa:e9:13:b7:63:2e:ac:21:40:e3:0d:f0:
         2b:68:4b:3b:1c:95:43:35:5e:db:f7:2b:0d:93:25:dc:a3:56:
         a6:80:71:18:38:f4:77:63:d8:75:a7:f0:d6:99:43:93:8a:0c:
         16:95:b4:89:ba:0f:b4:6d:b9:bc:95:57:e6:b9:ff:e9:ac:9c:
         cf:f0:c9:41:ac:d8:21:94:6c:71:83:d1:32:83:37:1a:d4:a2:
         75:31:6f:51:ae:b8:c3:2e:b8:e0:fe:33:04:f7:2c:df:b9:b7:
         21:b5:e3:81:7e:4e:c9:a0:f3:0d:bc:04:5a:ff:90:d8:aa:99:
         10:f8:ab:61:ea:15:53:e9:ce:85:23:a3:0b:38:14:28:3d:f8:
         06:01:65:2d:0c:27:70:f3:23:55:3f:5f:78:ee:3e:19:20:da:
         96:fb:43:48:78:3c:06:32:67:ae:a8:ad:7d:75:fb:b3:bf:bc:
         67:e1:ea:ea:e7:36:2a:0d:4e:2a:0b:67:3f:7f:dc:a3:6a:dc:
         70:6b:84:15:4a:03:d7:0f:4f:d6:e6:3d:0e:76:5c:ca:36:3a:
         25:57:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org