Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e706ca14-8352-34f1-8c90-8b9136709528.roa
File:                     e706ca14-8352-34f1-8c90-8b9136709528.roa (raw, json)
Hash identifier:          JR46nibJNgc7D+S5qCjkZ1fWOyHQx4+uALuhx7TuWPs=
Subject key identifier:   32:37:E4:25:1E:C1:E6:BC:16:53:CC:58:C6:C3:E2:16:71:C1:B1:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049706164AA8E6BA9AA7C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e706ca14-8352-34f1-8c90-8b9136709528.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        73.120.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:70:61:64:aa:8e:6b:a9:aa:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=22f4142d-6667-49fa-a529-3542ceafab55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:f5:6a:d1:1f:92:77:71:3e:47:47:af:2f:
                    9e:e7:59:55:77:a3:46:2f:e0:99:d8:a0:4f:0a:57:
                    d0:73:79:21:d9:cd:1c:bc:1c:1b:f5:41:77:f2:bf:
                    51:eb:4c:1f:44:20:f9:1a:17:f5:5c:bc:7f:c1:11:
                    ae:da:28:60:03:87:29:49:ec:72:21:15:32:a5:f7:
                    01:5e:da:34:9f:55:59:af:e2:88:59:33:7e:8d:7d:
                    bc:55:92:1e:ab:9e:f3:eb:80:d2:e3:f9:3b:27:ec:
                    74:2e:24:b3:79:f1:0b:e1:1e:60:e3:29:9d:5b:20:
                    d8:3b:11:2e:a4:e4:4d:bb:00:c8:fa:e0:ab:22:4b:
                    13:63:03:a6:65:ad:5c:53:be:1c:b1:4c:7d:10:4b:
                    1e:72:eb:b0:0c:60:56:cc:b3:d7:0f:93:3e:e1:52:
                    09:de:2a:3d:4c:26:35:00:81:53:4d:26:0e:b3:61:
                    4b:88:9e:8f:ca:49:8a:7f:c6:47:a7:df:30:ee:fd:
                    f3:9a:35:ea:5e:01:fb:6e:68:e5:4c:a4:8b:40:37:
                    ce:a0:94:ed:fd:0f:a0:98:78:33:7c:33:a1:b8:3b:
                    89:d0:3b:7a:17:fd:9a:2e:26:34:ed:7f:c4:40:b8:
                    5a:c1:4a:69:0c:41:91:d9:39:83:4e:cd:fc:67:2f:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:37:E4:25:1E:C1:E6:BC:16:53:CC:58:C6:C3:E2:16:71:C1:B1:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e706ca14-8352-34f1-8c90-8b9136709528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.120.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:7b:12:8a:32:97:b0:be:c1:89:e5:2b:a7:90:ce:41:2c:
         7e:15:57:cc:07:75:39:ea:46:4f:ad:8c:13:a9:26:ab:95:85:
         7d:cd:b8:07:28:7a:ba:cc:a2:c7:35:97:c0:11:05:c1:bf:ff:
         8b:51:c0:16:c8:08:a6:39:c4:08:2b:62:28:df:91:44:a5:67:
         f7:ca:13:48:ec:ea:40:c0:c1:fb:e0:04:38:6d:91:86:51:d7:
         2c:8b:3f:82:94:f3:5e:d4:a8:7c:31:90:31:6f:a4:e2:ee:6a:
         a8:64:22:bc:76:34:13:36:c3:39:77:55:e4:6a:4c:b9:61:9c:
         72:86:37:94:ec:65:a6:5c:a8:5d:00:3f:2c:56:47:b7:96:db:
         c7:a0:3f:27:e2:93:c1:9b:7e:cd:cf:8f:99:60:0c:c8:73:26:
         2a:63:34:40:97:3c:04:a9:c1:4c:ca:76:82:75:e2:c0:f6:3a:
         c7:d7:33:71:32:64:e0:52:18:8c:69:8c:ff:45:30:4d:6c:3f:
         ea:6d:dd:51:a8:5a:45:2a:d8:34:93:e8:10:9a:65:77:a0:91:
         24:99:62:5b:50:f1:56:01:0d:99:ca:df:0d:0a:ae:7d:60:45:
         a9:f9:37:f4:15:63:4f:39:74:3a:e4:b6:b0:e0:09:5a:3d:ec:
         2c:e9:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:33:22 2024 by rpki-client on console-fra.rpki-client.org