Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/bb27cd6d-6c52-3f8d-b253-a0640aa57751.roa
File:                     bb27cd6d-6c52-3f8d-b253-a0640aa57751.roa (raw, json)
Hash identifier:          xGoWp0pL0+G+Smt8kErQRmpq+fdqXOCAJ45AAmeWjSc=
Subject key identifier:   BA:76:3A:F5:75:EA:B1:5C:32:0F:12:E1:80:85:E4:5A:17:B7:0B:C6
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F00108E646C73E7C439880
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/bb27cd6d-6c52-3f8d-b253-a0640aa57751.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:01:08:e6:46:c7:3e:7c:43:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=5b650611-68b5-43dc-8c81-07038270b938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:2c:da:63:41:84:b6:da:1f:85:4f:53:e3:
                    59:92:4a:e0:dd:37:4a:17:c8:79:16:60:aa:2e:f2:
                    e5:5e:77:88:ac:94:8f:46:0d:78:77:52:ed:3d:ff:
                    19:2b:76:99:f9:9d:00:4c:cb:0e:79:01:f0:2f:30:
                    d8:fc:a0:f6:8c:77:3d:7e:37:29:28:c2:0f:d4:12:
                    a0:c0:9b:d3:e3:4e:85:5c:49:f6:c4:79:c2:19:08:
                    a3:d8:cf:74:f1:7a:1d:2f:7c:dd:54:d0:e0:3c:af:
                    2a:e0:60:8b:e1:9e:7e:9a:83:e7:2c:72:3b:9e:b7:
                    19:6f:1b:65:23:7d:f3:fe:2d:c0:4a:ab:fb:9b:6a:
                    6e:2f:68:a4:5c:41:7e:f8:8d:dd:54:67:89:af:b3:
                    02:93:03:96:d1:af:fe:b9:f5:49:96:d8:00:86:49:
                    37:b2:69:d4:fa:fc:58:a6:68:b4:9f:c6:fe:2d:f2:
                    1d:43:d3:00:fb:5c:eb:fa:1a:71:f1:f8:70:ec:95:
                    a8:cf:95:3a:69:12:3e:1f:58:c9:de:ad:6e:99:fa:
                    0e:6b:bf:68:83:37:e5:92:27:10:cd:57:6f:c3:1b:
                    83:1e:81:b7:8c:22:bb:c6:ef:cc:ec:44:78:1d:22:
                    a3:04:36:67:64:8a:70:83:e7:1d:04:87:99:c3:2c:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:3A:F5:75:EA:B1:5C:32:0F:12:E1:80:85:E4:5A:17:B7:0B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/bb27cd6d-6c52-3f8d-b253-a0640aa57751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:4f:96:f3:cf:48:54:d9:ee:23:41:a6:09:7a:2e:94:ee:
         82:35:36:1a:ea:3f:8b:c9:e8:9a:4f:a0:7e:05:e9:9a:f5:24:
         d6:80:51:f5:64:88:31:19:28:47:81:bb:ae:a2:38:c9:6a:15:
         d8:4d:a8:7d:c0:0d:9b:9e:d6:d9:6f:d6:3a:b6:bc:10:65:b4:
         6d:91:c7:4c:db:b1:f4:37:eb:7a:c4:4e:a0:43:a3:95:0a:8d:
         bc:ff:f1:23:60:8b:75:12:4f:6f:b1:ba:b6:03:ab:86:77:db:
         cf:63:92:78:79:7e:e2:89:6c:fc:e0:5f:dc:01:28:7d:4d:b6:
         32:ae:b4:74:d5:8c:6f:c3:e1:90:82:80:8b:2d:76:47:18:84:
         c1:c2:14:38:eb:b7:26:3a:e3:4d:05:fe:41:23:41:ea:4a:a3:
         38:97:2b:27:aa:28:01:37:11:85:57:69:06:8f:02:46:16:c3:
         aa:85:ca:94:55:b1:18:27:5a:01:79:53:23:a5:b8:fd:c5:31:
         26:c8:e9:d7:ab:e3:57:f0:f3:9f:ea:40:6c:ef:4b:cf:eb:29:
         00:e5:78:f8:26:c3:d2:f1:16:9a:a2:7f:02:59:57:3d:e1:d9:
         bf:ff:4e:f6:a5:05:49:80:69:dd:86:05:3b:5a:25:f6:60:1c:
         3f:b2:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:04 2024 by rpki-client on console-ams.rpki-client.org