Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa
File:                     2f47224b-3181-3456-acd2-84215941a959.roa (raw, json)
Hash identifier:          QDkgqezB6peTCzdOfgwEoeW8oC3d7qOteCAU/AHKFsA=
Subject key identifier:   E1:CA:EA:96:9C:5D:0B:6B:FD:22:CE:87:CC:2B:1A:FB:0B:10:D4:7D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584770CB9EDBE9B049048D07AEA0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     30428
IP address blocks:        216.97.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:9e:db:e9:b0:49:04:8d:07:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=f0a78ad1-fa4c-49c7-860a-6506e37aa37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:32:04:21:d3:20:2e:27:a7:cf:78:9d:05:
                    62:b0:7a:0b:49:25:5a:fd:bf:b6:dc:e1:50:26:83:
                    6b:ca:42:8c:0a:a1:43:ca:aa:a5:20:9f:e2:55:08:
                    d6:7c:4f:e3:ef:34:55:e7:56:12:83:83:2e:ea:cd:
                    cd:0f:d7:60:97:fc:54:35:24:83:e2:50:5c:4d:47:
                    01:41:d6:29:b4:1b:f4:ec:50:e8:b4:6d:ad:d7:d4:
                    4c:b2:fc:43:b5:6e:91:e8:12:85:55:b2:d9:d7:69:
                    d1:15:3f:bc:ed:e5:7b:57:54:f8:58:82:c6:ae:41:
                    17:61:a6:eb:5d:3b:3d:9b:26:d5:6f:94:c5:3c:02:
                    b5:c4:81:8c:99:d6:d0:b2:74:75:fe:e8:9f:84:53:
                    80:51:4d:d5:a0:4b:ba:76:76:98:d5:ee:b7:7d:90:
                    03:e6:a5:fc:47:b4:68:93:71:2e:fb:38:50:f3:58:
                    14:5c:19:eb:23:e5:3a:61:31:b8:98:22:a6:14:a0:
                    44:27:7a:b2:39:d9:06:fb:ff:b5:ab:91:64:8b:78:
                    8b:2b:8d:f6:aa:89:d1:0d:bf:fe:da:e8:03:88:a3:
                    28:70:81:d4:bc:d8:9f:3e:99:53:75:a6:9f:5e:bf:
                    fc:5e:91:e3:ca:71:49:75:bf:4b:6f:f9:7e:43:2c:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:EA:96:9C:5D:0B:6B:FD:22:CE:87:CC:2B:1A:FB:0B:10:D4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:b2:a4:3e:e7:5c:6c:5a:fd:0c:56:9a:38:b2:1f:61:9d:
         62:fb:52:a4:a3:1d:4c:2f:6a:11:d8:b6:d5:62:e5:a2:47:ed:
         81:10:25:14:e3:a4:2b:b4:fc:e5:c3:4f:74:ad:f0:1c:01:b6:
         6a:ca:de:cf:2d:08:23:52:72:2e:63:b7:fd:94:40:25:34:19:
         ba:0b:9d:a4:c9:fc:a7:86:87:4c:f7:60:76:95:7e:62:81:87:
         34:ad:c9:9b:50:32:af:e9:5c:c3:8c:44:51:48:b3:d8:77:7a:
         39:9e:94:b9:98:a8:04:10:fb:78:f7:d5:55:67:3b:bb:19:80:
         32:4c:4c:51:03:d2:6e:d4:f9:55:86:8b:02:7a:9a:b5:4f:86:
         a0:1a:01:eb:0b:bb:f3:8d:87:dd:8e:0d:2e:a2:10:cf:f6:5f:
         41:dc:9e:70:98:62:c4:97:fb:b6:9c:26:57:67:2e:bc:6c:70:
         ed:d1:ed:54:2b:05:0c:65:fb:c3:93:3a:26:ca:35:b9:58:c2:
         05:c3:d3:66:fc:38:e5:6d:61:81:e3:80:b7:75:cb:1a:fb:8d:
         70:d9:a7:fd:56:32:be:60:ae:89:a0:3c:08:f3:dc:ca:3a:54:
         38:5f:5f:1b:66:25:93:88:07:be:12:25:71:84:cc:31:36:91:
         69:14:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:31:00 2024 by rpki-client on console-fra.rpki-client.org