Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4339924a-b76c-3ff6-a4be-5645bcbc8205.roa
File:                     4339924a-b76c-3ff6-a4be-5645bcbc8205.roa (raw, json)
Hash identifier:          fZsr+yhdkN6CtZbF2FDY8YmffyB9VzG2uJMjn1Ed4J8=
Subject key identifier:   0C:4A:7E:51:99:2C:A0:BD:B3:7E:A0:0D:3D:C9:DA:B3:8F:75:6F:05
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285847CD1AA181ECBBD1F84CA21700
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4339924a-b76c-3ff6-a4be-5645bcbc8205.roa
Signing time:             Thu 07 Nov 2024 14:34:19 +0000
ROA not before:           Thu 07 Nov 2024 14:34:19 +0000
ROA not after:            Wed 05 Feb 2025 14:34:19 +0000
asID:                     400859
IP address blocks:        64.22.89.0/24 maxlen: 24
                          72.9.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:1a:a1:81:ec:bb:d1:f8:4c:a2:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Nov  7 14:34:19 2024 GMT
            Not After : Feb  5 14:34:19 2025 GMT
        Subject: CN=4eceb617-b3fa-4f7a-9e03-5bd4d0bd20a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:6c:52:9a:b3:26:46:fa:c2:4b:f4:39:5d:
                    c7:6a:ed:10:fa:25:aa:8b:cc:e0:5a:1a:06:c0:88:
                    ce:e8:97:35:16:f3:15:d8:53:4b:58:c5:30:dd:09:
                    dc:c7:62:e7:d9:98:b4:8a:cb:f1:fa:ec:f4:1f:11:
                    3e:9d:45:5d:bc:96:7a:e7:45:d0:7a:9e:5b:0e:47:
                    80:19:27:d9:2c:d1:c7:bf:dd:47:f9:75:33:fa:db:
                    45:26:b0:79:8a:0d:4d:30:6e:67:ec:c7:0d:04:9f:
                    85:e4:86:57:e6:78:a1:84:cb:19:ee:54:94:20:dc:
                    d9:32:9c:d3:8e:5a:a2:12:c3:aa:ad:13:7f:dd:b6:
                    25:f1:9f:37:01:97:d7:56:2d:88:5a:b8:cb:17:f6:
                    2f:74:b1:64:7f:b9:b0:83:87:39:80:fa:46:83:45:
                    01:5e:e1:2f:03:91:2d:d2:38:16:4b:5e:85:2c:20:
                    b5:4a:a6:e0:bb:ca:ee:18:a9:c6:f3:d7:be:0b:36:
                    03:1b:b3:35:f9:48:b3:13:c4:22:e1:0b:01:4f:13:
                    fa:d5:0c:75:31:d6:86:47:e7:ea:bd:1f:87:d6:df:
                    92:81:3a:72:3c:23:da:a1:53:59:7d:61:ef:3e:9f:
                    31:06:5e:b7:66:df:23:6d:6e:a3:de:ed:2b:56:5c:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:7E:51:99:2C:A0:BD:B3:7E:A0:0D:3D:C9:DA:B3:8F:75:6F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4339924a-b76c-3ff6-a4be-5645bcbc8205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.89.0/24
                  72.9.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:89:ce:25:62:57:7f:0a:3f:da:e6:57:7a:2a:17:31:d0:10:
         3c:8f:e7:72:bb:29:9e:ec:8c:08:4b:af:c8:74:40:1e:1e:ad:
         16:74:0a:66:83:8d:29:4e:9a:60:d0:32:f6:71:b6:9e:3d:c0:
         78:14:ad:5d:4f:76:a4:cb:f6:e1:77:c2:b1:23:92:50:ba:88:
         ae:ee:de:de:c9:20:d1:fc:71:4e:cb:0e:e9:1f:ff:11:bf:bf:
         1a:1c:b1:0b:d9:bd:62:13:48:3d:14:06:cc:6e:a3:49:7e:eb:
         ef:e8:04:0b:92:83:24:3d:82:37:42:c5:c7:04:c4:84:a8:d6:
         bd:00:56:5a:29:2e:d4:a1:13:7a:c1:72:00:f0:2c:d2:e8:e1:
         21:c3:85:19:ec:b5:c6:3d:43:1d:b7:fc:62:52:bb:f2:d3:60:
         55:f9:b0:45:a8:85:59:63:1d:2a:62:53:d8:55:1b:9b:11:5c:
         79:1e:d0:3f:1c:38:57:0a:b7:c4:aa:17:79:e8:cc:00:92:bd:
         b6:e5:68:ee:45:cc:66:a3:8c:93:f1:d7:46:77:6c:08:dd:ba:
         6b:a0:a0:8b:ef:0d:35:25:21:fe:2b:b0:54:0c:fe:df:4c:3a:
         36:34:22:07:61:85:18:e1:2b:d7:d5:42:6e:57:22:9b:77:9a:
         8e:e9:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:02 2024 by rpki-client on console-fra.rpki-client.org