Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/0f999cc6-326c-3089-8733-b4a4ba80db3c.roa
File:                     0f999cc6-326c-3089-8733-b4a4ba80db3c.roa (raw, json)
Hash identifier:          bMyJAB3kN2bncO/y+5aJ+ZPDIXMeWClPsp0KDWxmLWI=
Subject key identifier:   06:10:AF:B6:9D:29:DF:2B:AC:DA:25:C0:27:EB:31:31:44:2F:1E:39
Certificate issuer:       /CN=773da6fe-597a-4b72-af97-236c36f08268
Certificate serial:       010D0C9F43285847C4AA14FF59DBA143E6A20860
Authority key identifier: 81:64:3A:1E:18:8E:D9:D8:01:4E:52:B9:12:60:84:11:E5:CA:45:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/0f999cc6-326c-3089-8733-b4a4ba80db3c.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     64224
IP address blocks:        147.92.56.0/22 maxlen: 24
                          2602:fe85::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/773da6fe-597a-4b72-af97-236c36f08268.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/773da6fe-597a-4b72-af97-236c36f08268.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:14:ff:59:db:a1:43:e6:a2:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773da6fe-597a-4b72-af97-236c36f08268
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=326833a1-1d96-4848-8a01-7127e5f070f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:c9:3e:f7:4f:20:75:35:9e:33:6a:eb:d0:
                    0c:d9:79:b1:a6:c6:f2:32:a9:7a:81:4f:1b:b9:11:
                    7c:d4:41:2b:ec:7d:36:4c:5e:4a:aa:93:ae:c1:e4:
                    b0:c8:74:8e:53:03:aa:0c:aa:26:42:52:63:cc:22:
                    2c:54:eb:4a:0b:18:fb:71:86:56:0b:b0:65:96:43:
                    23:a4:15:12:23:07:60:45:be:f4:a6:28:5b:2d:bb:
                    ec:22:ec:d2:d8:41:f2:cb:84:d0:d9:1e:31:db:b4:
                    ee:9a:af:1c:af:c6:a6:52:db:f0:0e:fb:1e:52:2d:
                    6e:f3:7e:ab:d1:fb:6b:72:af:ad:17:81:0f:df:44:
                    1a:8c:59:24:09:2e:b6:0c:3b:6e:27:fa:55:c0:c5:
                    59:a6:ed:3c:92:3b:91:54:33:57:fe:41:7d:5e:54:
                    f2:88:31:3e:f0:ce:7a:63:4e:e1:6c:18:5e:ed:64:
                    1f:48:b0:65:b0:97:64:d9:16:b9:22:b8:cc:99:4f:
                    dc:9b:69:95:f5:f2:b1:ca:4c:29:32:21:48:c7:f3:
                    7c:a6:5d:20:f6:cb:28:a5:f2:77:fd:05:59:87:af:
                    52:ec:98:0f:c3:07:b6:e3:05:db:44:3c:13:ab:eb:
                    51:94:c6:d2:c5:41:90:4b:68:24:09:b2:78:4c:89:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:10:AF:B6:9D:29:DF:2B:AC:DA:25:C0:27:EB:31:31:44:2F:1E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/0f999cc6-326c-3089-8733-b4a4ba80db3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268/773da6fe-597a-4b72-af97-236c36f08268.crl

            X509v3 Authority Key Identifier:
                keyid:81:64:3A:1E:18:8E:D9:D8:01:4E:52:B9:12:60:84:11:E5:CA:45:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/773da6fe-597a-4b72-af97-236c36f08268.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.56.0/22
                IPv6:
                  2602:fe85::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:83:15:b0:4a:9c:d0:a9:18:04:51:2b:73:24:8b:57:24:
         c8:20:c6:14:b3:d9:33:ec:0b:e4:af:d8:27:6b:ae:91:ed:f0:
         1e:a8:88:c1:ce:e4:46:63:81:8e:9f:62:c0:cc:d3:db:c1:c1:
         71:a5:1c:45:9f:19:26:fb:c8:b2:1e:c1:97:80:b2:8e:fd:10:
         9b:20:db:e9:d7:50:ff:11:bb:24:23:6c:58:25:23:2c:0e:bd:
         e1:33:69:9c:b4:5f:5f:da:33:ec:ad:35:99:c2:1c:b7:48:9b:
         e1:bc:f0:01:17:e3:2f:f4:bb:42:70:13:60:55:4b:86:44:c6:
         00:e3:62:a9:ab:fd:20:f0:d2:20:86:87:43:93:f1:7e:8b:1e:
         00:f0:a3:17:10:04:f1:63:f8:dd:bb:a4:07:29:e8:2d:4f:36:
         88:23:7b:f5:f5:8a:56:2c:74:4c:1b:6a:67:23:06:a9:5f:3a:
         3b:60:4c:9a:55:99:48:cd:89:62:b8:97:81:25:a3:75:a4:86:
         ac:9b:0c:3c:c3:34:27:05:3c:9f:e5:5e:09:1e:ed:eb:ae:e1:
         f4:5e:ef:59:ef:31:83:63:64:bb:98:0e:5c:56:7c:fa:0b:0d:
         fd:af:1f:8b:d0:5a:02:1b:9b:8e:c2:d7:21:33:c9:62:c4:90:
         27:ea:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org