Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096a6a81-dc10-3ced-9673-37e63759c917.roa
File:                     096a6a81-dc10-3ced-9673-37e63759c917.roa (raw, json)
Hash identifier:          8NOqJPPzYQCysW8zoWYJS5VBRpRv+R5zNQc/doU0M74=
Subject key identifier:   02:DE:AD:7E:06:8C:B3:AC:27:D4:BB:6E:C5:B1:19:79:0E:96:E7:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E59901E025D24187409980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096a6a81-dc10-3ced-9673-37e63759c917.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.7.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:99:01:e0:25:d2:41:87:40:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=4a527c08-8441-467b-ada7-32205f7af1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:0f:50:df:f7:5a:13:f1:82:a4:79:f6:4c:
                    37:df:7d:62:66:eb:f0:11:fd:2f:e5:e4:2d:af:3a:
                    2c:8f:8e:e9:f5:a3:55:0d:75:34:55:31:f3:5d:be:
                    c5:5a:02:41:1d:3f:a2:b4:07:42:d4:29:d4:a7:1c:
                    76:41:7c:c4:47:2f:7a:02:1d:ae:f7:39:66:d6:21:
                    f5:3f:03:00:8c:5e:d1:b9:78:1a:73:8d:b0:f9:73:
                    84:72:c5:77:ac:89:3b:63:f9:32:bf:18:05:2b:ee:
                    ee:67:0f:93:91:e7:ef:1b:1e:3e:4e:8a:57:59:90:
                    d2:ef:3f:3d:ef:c6:16:66:d9:9f:4b:ba:f2:9b:8a:
                    88:38:dd:af:6f:9a:1d:35:5c:d6:0a:31:01:40:e7:
                    14:58:65:41:32:0a:e3:ec:07:22:26:be:91:86:81:
                    1d:31:6a:df:72:f3:ae:56:35:95:bc:68:2a:c5:bd:
                    19:e3:c7:32:5b:45:09:68:70:b3:fc:36:c0:83:07:
                    b1:61:af:38:73:d0:ba:7a:e9:4d:d5:95:5e:5c:3d:
                    d2:cb:41:06:8e:fc:66:ba:40:ca:cf:40:0a:d6:bc:
                    cd:c4:fb:3b:08:e6:1c:34:58:f7:e0:49:7e:27:c1:
                    03:92:e2:c9:eb:dc:44:23:f9:7c:cd:41:af:32:f4:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DE:AD:7E:06:8C:B3:AC:27:D4:BB:6E:C5:B1:19:79:0E:96:E7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096a6a81-dc10-3ced-9673-37e63759c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:6d:1a:ab:8c:57:5e:71:1f:88:79:dd:cf:2b:dc:42:05:
         60:2c:de:47:8e:2f:6b:0b:df:7a:dc:c0:ec:ff:67:33:dd:3d:
         14:de:3d:70:ac:9e:6f:da:4b:e1:5a:14:71:36:06:ad:b6:50:
         32:75:df:cb:e1:55:67:58:fc:94:6c:9f:f1:7d:b4:e4:b7:3f:
         ca:ab:ef:95:a2:ef:0d:a4:67:87:bc:10:e5:9a:52:d9:6c:31:
         a4:61:fd:dd:f6:7f:41:84:7a:d6:60:e0:01:65:56:f3:19:5b:
         bb:3e:ad:c7:b6:1c:f9:43:32:44:7e:d1:b3:9d:d0:5c:cf:52:
         fe:86:52:f4:03:bf:64:5a:8e:25:84:98:04:75:6e:ab:16:3a:
         eb:4d:c3:67:75:f6:c1:61:8b:d8:43:d5:cf:d2:8d:46:f8:80:
         5c:09:22:30:eb:b7:36:12:ae:de:6f:93:b3:60:36:8f:1d:a1:
         9c:d3:13:aa:28:c4:2c:97:24:de:9e:97:27:18:06:68:c9:fa:
         39:f5:6b:2d:29:a4:74:16:ba:9c:2e:62:26:bd:ce:86:48:9c:
         e4:1e:2c:2a:4f:cf:b4:6d:c1:c4:d8:34:9e:27:d3:36:79:04:
         f1:c2:8f:79:51:b2:6b:81:83:fe:6c:07:d9:37:8e:6e:0a:ee:
         29:c0:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:33:51 2024 by rpki-client on console-fra.rpki-client.org