Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa
File:                     79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa (raw, json)
Hash identifier:          bGJjRKuDcc2WoWRSDV9+zLtWN21LwMqIDO0nHXyVA/4=
Subject key identifier:   32:32:96:47:F3:B4:14:F0:B3:6F:94:2C:A9:10:29:19:B7:47:0D:C3
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858473A5B7C48180884B6D0BB0A80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14618
IP address blocks:        164.55.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7c:48:18:08:84:b6:d0:bb:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=cd7ecaa0-f220-4081-a70b-7889914862e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:34:98:19:53:46:a0:60:31:2c:27:f0:c4:
                    60:36:ba:44:50:ed:3e:13:a5:e6:5d:37:73:ef:3c:
                    8e:d8:d6:6c:66:14:58:8b:a3:d8:70:52:9d:57:27:
                    2c:fc:51:07:2a:75:2f:85:d1:f0:0d:b6:9b:7c:5f:
                    c7:c6:a1:ce:50:a1:a8:39:5b:81:18:08:d5:81:c8:
                    f2:9d:46:7c:93:e6:d1:95:cc:d8:8e:44:bb:ce:8d:
                    f8:79:8a:f1:c6:8a:1d:4a:bf:0f:8e:35:28:c5:ea:
                    86:6e:db:37:c3:f5:7e:fc:f4:d7:0b:2b:00:8c:b2:
                    a1:50:ac:6c:e4:c7:a9:2b:86:c5:d7:28:6f:55:93:
                    06:01:87:31:85:eb:88:45:45:a1:4c:cb:47:49:d2:
                    40:7a:ab:40:e3:36:32:2c:2b:15:6c:34:b7:d7:03:
                    e3:2b:f5:f5:04:98:11:97:72:4d:97:09:f7:b5:11:
                    28:ca:96:bf:89:8a:49:d6:47:62:4d:07:a0:24:f6:
                    ea:26:42:cb:5a:e3:f6:c5:c9:01:b1:29:3f:0b:99:
                    db:65:61:63:13:9b:1b:96:63:67:7f:95:d3:11:c9:
                    e9:f5:8d:ef:b7:3b:cf:54:6d:4a:67:9b:d7:51:48:
                    c3:35:44:51:74:3b:99:b2:96:f9:9d:0e:84:83:36:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:96:47:F3:B4:14:F0:B3:6F:94:2C:A9:10:29:19:B7:47:0D:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:72:67:5c:e9:61:06:bf:c9:23:d0:0b:b0:bf:b6:68:7c:6b:
         fb:6a:f8:8d:09:1f:c7:59:e6:e2:02:24:02:8d:95:cf:2d:e4:
         6a:7c:cf:ca:58:52:57:92:63:b4:8a:21:3a:a1:34:f6:57:c8:
         91:60:a8:12:70:04:74:7d:bb:16:6c:0f:78:d4:a1:5b:b7:8d:
         2b:f5:e5:08:c6:3f:25:ef:be:8a:cf:cb:02:1f:e2:39:67:56:
         37:a0:47:71:83:11:97:af:7d:74:65:8d:d9:e8:5f:34:01:a6:
         40:23:99:c4:ec:46:93:61:c5:97:13:ef:7a:af:53:6c:38:76:
         30:66:40:e7:01:9b:a7:2c:bd:c0:78:11:18:df:3f:96:b1:9f:
         70:68:2b:e4:67:19:ac:d9:bf:72:44:89:ff:df:ef:9d:0b:1e:
         4b:4f:9d:4b:ca:e8:1b:40:34:c5:45:90:8e:14:09:8e:83:f1:
         71:72:b8:25:85:04:b5:1c:1d:a1:b5:04:95:c6:b3:da:e3:5e:
         58:d4:3b:91:a3:b1:d7:74:00:77:62:f3:44:69:8b:47:d0:c2:
         60:30:2d:e1:6d:b8:2c:e0:10:68:c0:35:94:05:e8:84:37:8b:
         a9:03:e9:c5:46:0a:80:b6:26:55:83:bb:19:ff:c0:99:01:4e:
         3b:aa:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org