Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/034c89d5-ce53-3b39-848c-7b90b793775a.roa
File:                     034c89d5-ce53-3b39-848c-7b90b793775a.roa (raw, json)
Hash identifier:          N4maMWQfMu8jrJm2bFrM2fLDOPTy8cNEgT1CzJMu4S8=
Subject key identifier:   21:BF:49:4E:03:93:F0:BB:F7:DF:0A:1B:09:36:73:2E:2A:93:C0:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89E8E6293DBA0150F9B780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/034c89d5-ce53-3b39-848c-7b90b793775a.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        71.230.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:e8:e6:29:3d:ba:01:50:f9:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=21f94512-f192-413e-8bab-a014e47417a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:24:9f:80:b4:11:18:4f:9b:63:cc:4b:3c:
                    cf:6c:04:53:c6:5e:68:74:89:2e:41:58:66:8e:18:
                    c2:e6:c4:9d:27:82:ac:3f:36:49:76:c8:30:d0:c0:
                    df:8e:b4:0a:6a:c1:30:d0:e8:b7:c3:e6:f5:e8:e7:
                    11:e4:f1:e1:dd:12:c8:dc:4d:f6:37:7a:0a:a3:45:
                    0b:67:51:f9:1e:a4:90:1e:38:8f:38:71:8d:c7:37:
                    39:f0:d3:dd:ab:7b:e5:f0:72:ca:47:d0:9b:e6:f5:
                    c6:dd:8c:b5:6a:c0:e2:40:7a:f6:d0:01:00:0f:fa:
                    e7:38:b3:9f:c4:e7:db:ee:e4:a6:c1:32:5a:ce:c5:
                    19:83:54:d3:59:1e:d9:5b:85:c7:19:d3:7b:1a:6d:
                    ad:e4:4d:83:87:76:35:f3:c4:4e:aa:39:e8:1d:e4:
                    db:b4:e0:54:71:76:ed:c4:e6:ad:24:e6:67:82:6b:
                    67:2a:99:e2:d5:10:e4:45:f2:72:18:5f:2c:3c:2c:
                    0c:73:e5:88:57:20:41:21:0a:a6:c4:be:0e:a6:5c:
                    76:92:ed:9b:cb:59:a9:92:6c:12:ac:e8:e8:17:36:
                    fd:81:70:49:4c:b7:6b:94:20:88:f9:04:f4:5b:a5:
                    19:55:fe:5f:1c:ae:b1:b1:ad:19:3b:3e:41:43:fa:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:49:4E:03:93:F0:BB:F7:DF:0A:1B:09:36:73:2E:2A:93:C0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/034c89d5-ce53-3b39-848c-7b90b793775a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:b4:b6:7c:f0:a6:fd:16:21:83:75:a9:48:f6:65:da:46:
         e5:cd:e7:6f:ca:a9:a2:e1:72:83:2d:95:fe:5a:0a:66:fc:99:
         49:2e:2f:db:bb:f8:7c:93:75:6f:4b:59:3f:21:8b:ac:9c:8e:
         4a:95:17:14:30:f0:ec:a9:d0:64:14:3c:75:27:a5:40:5c:1f:
         03:00:20:57:10:43:ed:ad:94:62:41:9b:57:8e:c9:64:12:f5:
         21:c3:73:d7:7f:ab:2c:38:6c:7f:ac:82:6d:2d:b8:4f:1e:e1:
         33:42:17:86:6c:20:e3:71:ec:59:9a:59:4f:e9:f2:b6:cd:a6:
         7c:68:90:98:74:ca:8c:f8:c1:ee:dd:8e:db:58:c9:36:93:e2:
         66:56:68:17:bc:44:50:f7:5c:7a:75:1d:38:e0:e3:c5:9c:94:
         59:9c:b6:b1:e8:97:56:97:8f:16:4f:c0:4b:50:35:fa:de:d1:
         84:56:84:dc:a2:88:3d:cf:ea:30:ef:dd:a7:2c:3a:80:5b:41:
         5b:32:6e:75:7d:c7:ec:62:a9:bd:be:46:af:47:a1:f8:3d:f7:
         01:c3:01:a5:58:43:4a:aa:98:e4:0e:63:99:13:2a:0e:41:ca:
         41:22:f1:c7:f8:90:f9:6e:4b:72:50:92:3b:42:b8:48:0a:58:
         97:d7:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:47 2024 by rpki-client on console-ams.rpki-client.org