Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
File:                     cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json)
Hash identifier:          PkH44KC0VpBob0EIiyfZuTBzX9Fz/eHcAz0SOr/xyCc=
Subject key identifier:   87:18:95:01:AA:58:3B:80:A0:F3:D8:F3:0C:2F:08:42:FD:4A:25:A5
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584789EC01D148BEC7D384FAF860
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     16509
IP address blocks:        67.217.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:01:d1:48:be:c7:d3:84:fa:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=c6339929-89c1-43a7-a661-50e1caafdd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:ca:f4:67:cb:63:90:c2:00:dd:25:8f:a8:
                    5c:12:2f:63:4b:a8:ae:57:c4:30:1a:b9:af:f3:ef:
                    06:d0:69:43:fe:82:de:a1:a8:d4:f6:e1:36:65:a1:
                    54:f2:06:e3:1b:31:05:b0:b1:5d:4c:33:86:cc:6e:
                    db:af:8a:d9:ea:da:41:a4:35:c7:01:87:e5:a2:37:
                    2e:9a:3e:c8:52:af:41:6b:99:9d:f3:79:33:2d:bb:
                    3b:98:e5:ae:19:61:3a:20:ca:d2:63:05:3c:51:58:
                    33:da:1d:7f:87:8e:66:59:9d:83:2b:41:2c:50:0c:
                    9e:e5:39:66:f4:7b:11:85:da:e4:fc:1a:2f:7d:0c:
                    bb:74:f7:36:7c:eb:ec:41:c6:8d:1e:6a:c8:5e:0e:
                    40:36:ce:09:83:77:f7:f2:24:44:75:b8:d6:c7:03:
                    7e:c4:ac:0d:85:09:65:e9:38:fd:19:4e:57:10:77:
                    2d:39:b0:c4:8b:39:e3:69:cb:3e:f2:48:47:0d:c8:
                    5d:ca:a1:bb:3c:8f:05:64:de:cc:ba:92:ba:af:9b:
                    e4:29:ef:08:2e:57:de:5c:ee:a2:ef:9d:a3:09:42:
                    07:a1:eb:6f:40:d7:dd:c6:ca:cf:e0:4d:81:06:f1:
                    75:f9:9d:e7:4d:56:7a:d4:8e:10:6b:1b:ac:f5:43:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:95:01:AA:58:3B:80:A0:F3:D8:F3:0C:2F:08:42:FD:4A:25:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:7b:df:81:d4:87:4b:57:7f:78:da:2e:c7:b5:c4:59:0c:
         78:53:6f:5a:aa:91:6b:02:6d:92:a0:44:ca:71:88:df:d0:04:
         8e:82:4a:12:b7:08:03:d5:ae:a4:ca:db:90:b0:ae:01:65:25:
         d8:34:2d:b2:7b:30:8e:d7:c7:01:4b:be:f8:94:04:ef:af:9d:
         2e:f3:57:dd:40:9d:bb:58:66:ab:c6:00:96:a4:ec:c6:f8:11:
         e4:a1:3a:32:12:91:b7:a2:00:51:e2:91:60:13:0b:cc:63:43:
         a4:3e:7b:eb:3f:39:7e:ae:00:20:5d:06:6e:98:a0:f1:ed:c3:
         73:5d:42:36:aa:3f:3f:c5:85:e9:2d:67:a4:5f:23:18:e6:d5:
         d6:f0:17:66:de:e4:bf:ec:15:39:79:1e:b8:55:75:a8:cd:56:
         fa:fd:62:5a:45:61:47:e0:8b:3c:98:bd:dd:13:da:9b:ff:c1:
         e7:91:56:a7:80:63:2f:87:45:a4:1b:cd:52:81:10:25:40:62:
         3e:e6:a1:54:89:04:a7:9c:31:ee:f1:06:9d:be:12:d4:bd:b2:
         bb:73:a1:56:aa:f2:b4:2b:f0:08:ee:47:7e:d7:e2:9c:37:a0:
         22:5c:b2:b8:3b:1e:cb:4c:c2:2b:39:ef:78:1b:95:5c:c5:36:
         b9:46:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:50 2024 by rpki-client on console-fra.rpki-client.org