Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
File:                     be4b8d90-b929-3e3a-a40f-7571bb524df0.roa (raw, json)
Hash identifier:          jJxAkXaa8HUiiMIf0D/njyl5u88YihqU07pkEpXwYo8=
Subject key identifier:   7D:9C:3D:41:2D:0A:87:4E:89:B4:53:23:92:79:00:D2:D7:68:A6:EE
Certificate issuer:       /CN=d3292f16-bd24-4446-a83f-489f05a2076a
Certificate serial:       010D0C9F432858473FF0A6E2473250600A3C7E40
Authority key identifier: 2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     5758
IP address blocks:        64.29.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a6:e2:47:32:50:60:0a:3c:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3292f16-bd24-4446-a83f-489f05a2076a
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=3c94409a-6133-4b2d-ae6d-1ba18e4c0afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:95:48:b4:f6:ab:be:30:45:dc:6d:c4:47:
                    5d:3f:16:07:0d:80:49:60:3f:af:fe:bf:91:73:a7:
                    03:f5:69:23:a1:27:7e:e6:fc:f2:2b:f3:03:86:3f:
                    54:b3:f3:2e:75:04:8a:b5:38:a9:e6:11:d0:08:7c:
                    73:dd:06:f8:09:be:87:02:d5:e3:a4:34:36:c0:a3:
                    cc:98:06:73:24:84:58:0a:64:5f:f1:2a:91:b3:29:
                    45:a8:2f:da:f1:39:ef:00:66:e5:8f:26:a9:aa:24:
                    dc:46:83:27:38:50:2b:65:fa:34:07:7c:2c:0a:5d:
                    a4:c8:d1:69:38:7a:d6:44:f5:08:52:cb:b7:1c:01:
                    79:8b:12:1c:c6:c1:a8:29:57:e0:99:0d:b4:25:f1:
                    e0:c1:11:e9:5e:9e:26:7f:44:ce:27:d3:6b:e4:d9:
                    be:fa:a6:9a:33:d7:b2:5d:2b:8d:c3:04:14:50:76:
                    22:1f:ed:d8:b3:58:a4:4a:33:96:a1:79:00:f5:e6:
                    44:6e:14:e1:2f:ab:37:2d:d9:fe:f0:bf:c5:5a:f0:
                    11:6c:ed:e2:af:d0:d2:d1:10:b1:04:e5:40:c6:d4:
                    b1:2e:3a:bd:ee:8c:2f:6d:1f:28:43:99:f6:7e:a0:
                    20:42:b7:7f:72:a9:6c:ee:41:0f:e6:e0:49:0d:b1:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9C:3D:41:2D:0A:87:4E:89:B4:53:23:92:79:00:D2:D7:68:A6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:d8:9f:7c:b6:47:63:6c:a6:09:8b:05:b3:f1:18:f2:54:
         a5:d9:ee:ad:53:1e:63:0d:4f:52:60:26:b4:7a:f8:f9:4e:2d:
         79:4a:2e:69:10:38:e4:e0:c4:64:c0:b7:4c:3b:e8:58:f5:9a:
         a9:33:94:67:d6:30:f9:e1:23:1d:41:ab:93:7c:9e:59:e2:99:
         7a:fb:9a:a4:ba:7b:ba:dc:18:82:b3:8b:40:a0:95:7c:cc:d5:
         9b:2d:0d:ff:ab:bb:d2:2a:bf:fa:2e:33:53:b8:f3:65:d3:d5:
         ad:3b:5d:f0:97:33:0c:4c:25:0a:1c:b8:96:3c:8d:50:93:09:
         57:16:08:21:ea:06:50:54:31:b6:83:cd:cc:fa:df:d8:50:84:
         62:84:04:9f:1a:71:83:38:67:b2:78:cf:0a:26:c0:b8:5c:16:
         7c:d3:18:31:89:65:db:d9:2d:e0:c0:0d:6d:61:09:a3:27:e5:
         bb:20:86:3b:2c:d2:f1:a8:3a:af:39:46:96:d8:28:3b:be:92:
         b3:68:71:89:0c:7c:9a:fe:39:b4:fe:47:e4:e1:9c:2d:9e:29:
         ff:c1:36:37:7f:91:31:6f:cb:1e:d9:fc:da:04:8d:5c:7e:89:
         8d:04:f9:74:05:2b:ff:38:55:c7:0f:24:06:38:ab:14:17:c9:
         d3:38:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org