Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfa3cb0-ac88-3bce-9a79-edb62a784f30.roa
File:                     ddfa3cb0-ac88-3bce-9a79-edb62a784f30.roa (raw, json)
Hash identifier:          of4UnheF8Y1CM4c+FtW16U9c6NpB5vpXSRkCWBP16hE=
Subject key identifier:   DB:0B:EA:A9:21:B1:54:67:24:8C:13:C9:79:29:5F:55:A5:AC:CF:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA4185DAF8D5179FA6CA100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfa3cb0-ac88-3bce-9a79-edb62a784f30.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     33654
IP address blocks:        73.228.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:18:5d:af:8d:51:79:fa:6c:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=8546cb23-8987-4d4b-99c4-4c416a73c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:21:c8:fc:fd:6c:76:fc:0a:a3:56:9c:2a:
                    37:97:c7:db:9f:6b:9a:d2:10:40:45:8f:31:d2:3c:
                    75:8b:d3:5c:ad:55:5e:b4:0f:9a:7a:fa:d1:2a:b3:
                    ad:61:63:c9:93:cf:4d:d6:9e:60:e7:3f:51:87:1d:
                    73:a3:6a:3d:69:b1:d0:80:59:b1:97:21:ad:bc:0a:
                    fa:8e:73:d4:55:dc:60:18:ff:51:9e:43:c7:4e:5a:
                    8d:c4:2d:6f:e7:d8:0e:8e:a8:95:d5:7d:a0:c2:4b:
                    6c:aa:7d:54:d1:31:e1:48:d8:d9:7b:ed:d1:76:06:
                    de:31:39:82:ae:da:c3:41:25:b7:48:86:49:b2:ee:
                    e0:e7:6b:8d:a4:58:6e:02:7c:3a:e8:5c:f8:a8:4e:
                    2b:e9:96:c7:7f:fb:7c:3a:37:54:26:67:00:3e:02:
                    df:bd:5f:ec:72:cc:31:df:45:62:21:31:8c:95:fd:
                    14:4c:7b:b2:a9:36:64:10:85:c4:85:fa:96:a7:c9:
                    f4:18:5f:5f:29:b9:b4:fd:c0:db:ab:16:a4:f3:9c:
                    66:c0:5a:59:e1:a9:6f:c4:9a:c4:3c:84:5f:5d:ec:
                    42:23:91:1d:02:6f:1d:08:39:1e:e1:74:1f:fa:f8:
                    11:b5:77:7a:c1:16:22:b4:b8:e1:30:8c:9a:c5:0f:
                    d0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:EA:A9:21:B1:54:67:24:8C:13:C9:79:29:5F:55:A5:AC:CF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfa3cb0-ac88-3bce-9a79-edb62a784f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:34:af:f1:6c:ae:2c:33:f8:cb:85:6d:17:35:b0:89:00:be:
         6a:da:80:fb:ca:e8:ff:be:f3:b5:f6:b0:a1:51:cd:fb:4d:d3:
         be:2f:a6:5b:8b:ff:96:4a:77:9f:0b:6e:de:88:53:04:0b:00:
         58:b7:fc:c3:49:7f:7f:77:f6:88:fd:9b:59:a9:72:56:13:e9:
         1d:b9:2b:4e:b5:a4:74:4b:c5:c8:5c:4e:2f:ef:58:ed:2d:20:
         65:ed:50:d2:48:3f:de:a5:e3:85:31:86:e7:be:18:ba:f8:72:
         11:78:b9:38:53:94:ce:08:9a:ad:33:f8:29:ed:21:7e:b4:de:
         17:e7:66:72:cd:11:5b:01:43:f9:eb:6d:a8:08:17:4c:c7:89:
         3f:98:9c:d6:47:32:63:71:b4:9b:15:11:5f:46:57:8c:6b:40:
         59:a4:ae:c5:d4:75:2c:c8:4f:15:17:10:20:3d:a2:38:52:ee:
         37:35:e6:21:32:4a:41:9d:5a:2e:e5:75:0d:1b:7a:65:20:53:
         c4:70:7f:94:dd:26:87:8e:e7:a5:c0:e3:c7:ea:e7:1f:96:e5:
         41:f6:3a:ad:0b:c4:8a:66:d3:9c:1c:79:e1:7a:7d:92:5a:56:
         78:da:0a:66:bc:1b:a9:e9:ab:29:c1:b2:1a:72:6c:c8:72:6d:
         ab:26:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:45:16 2024 by rpki-client on console-fra.rpki-client.org