Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa
File:                     5c15b499-1a9a-301b-a8aa-5594396371a4.roa (raw, json)
Hash identifier:          aCD3812NV9CgZY5/t1t+etoWyMMA2fHxgQlP2Gxiksw=
Subject key identifier:   92:74:B9:6E:E1:61:AA:49:B9:5A:EF:80:A0:2F:32:DF:18:B8:54:C4
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285847600B91904E2B708715767D60
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     395633
IP address blocks:        173.229.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:91:90:4e:2b:70:87:15:76:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=5dde6069-f0b1-4141-9c7e-e9182952cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:a1:80:df:c3:f3:c5:26:66:a8:11:0c:15:
                    73:53:d3:a4:c5:01:a1:a4:e3:2e:d8:68:ee:ac:f5:
                    d4:26:4d:5b:1a:7f:c9:7b:8d:e3:d0:e1:63:6a:31:
                    71:66:cb:39:03:b2:cd:fd:69:d7:f9:ad:01:54:1e:
                    bc:f9:32:70:70:71:aa:13:8b:53:66:d5:de:56:35:
                    21:95:cd:02:06:e6:82:82:ef:87:75:5a:9a:e7:05:
                    51:27:a4:c1:c7:6f:f6:07:be:1a:11:de:37:3b:17:
                    c1:ad:b6:63:a8:9f:a1:6b:20:0e:d0:83:36:23:7d:
                    b4:c9:f2:02:68:da:4c:d1:69:b1:e4:7b:bd:25:9f:
                    ea:af:37:58:14:4b:80:5c:ec:97:54:7a:a2:15:ae:
                    18:bb:4d:28:63:8a:b2:f4:98:c7:74:89:dc:16:c9:
                    28:a1:c9:eb:6d:2e:0b:a5:ab:c9:e5:ea:54:9e:d0:
                    1a:21:94:ae:45:75:99:e1:af:3f:8b:8d:6b:f1:2d:
                    73:1a:e9:2c:8a:9f:1a:3f:87:45:64:2b:5b:ad:78:
                    34:3a:32:06:66:3b:19:c7:b7:70:b8:1e:f2:38:21:
                    84:3f:3d:05:58:36:43:b3:7a:2e:2c:f4:7c:2c:80:
                    ee:11:53:88:24:d1:2e:23:15:60:8c:9f:13:da:fd:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:B9:6E:E1:61:AA:49:B9:5A:EF:80:A0:2F:32:DF:18:B8:54:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.229.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:90:a0:42:cc:b1:43:e9:1b:2c:76:39:c5:21:8f:a9:1b:
         02:10:ff:c1:99:ba:6d:77:49:45:6a:f4:8b:27:ef:5a:02:11:
         62:86:e0:a1:e3:70:e0:c0:b5:ba:79:1a:68:1f:86:5a:e4:27:
         1e:a0:66:5d:54:fd:f0:d1:ae:01:ba:13:15:d7:97:ac:d1:37:
         ef:1a:5b:b0:7b:17:ef:14:22:e1:16:68:39:a3:2a:4a:7d:71:
         1a:9e:da:77:51:bb:c3:9f:54:28:92:10:41:f1:67:01:2b:01:
         b1:4d:f1:1e:df:9a:b2:f0:58:86:be:99:84:c5:3a:49:bb:d3:
         aa:d4:89:29:e4:65:72:a1:63:41:06:0f:17:61:90:8c:fe:da:
         cf:eb:a5:9f:75:25:64:23:3f:d7:45:7f:98:b0:e9:df:60:0d:
         f4:36:1a:27:e4:43:f4:20:9f:6d:78:99:a7:e0:d9:ab:15:3d:
         c7:70:fe:5c:20:83:3c:28:27:ef:db:8b:ad:22:f9:13:dc:1f:
         b6:76:74:89:91:77:1b:5c:09:b6:ac:ad:85:da:f3:c2:2b:b4:
         e9:ab:ad:5f:45:f9:7f:40:e9:e5:66:f5:f7:6a:e9:7e:45:c9:
         a1:dd:c8:16:05:ff:53:32:83:f1:16:ae:1d:59:63:d0:d2:b6:
         72:2c:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:35 2024 by rpki-client on console-fra.rpki-client.org