Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b4a0dac-4c2e-33fe-9131-f5895672a574.roa
File:                     0b4a0dac-4c2e-33fe-9131-f5895672a574.roa (raw, json)
Hash identifier:          T1Tpr4hXoQXDnVy27irmTL9p8UJYAWRifLyU0sJnVVw=
Subject key identifier:   7C:08:B8:18:BA:3B:2A:DE:EE:EE:66:C6:35:39:92:55:3E:DA:40:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6340A1D99731D68C80700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b4a0dac-4c2e-33fe-9131-f5895672a574.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        73.96.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:34:0a:1d:99:73:1d:68:c8:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=1f52dac5-5500-435e-b483-3a012836341e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:7d:f4:71:fa:be:c3:aa:3d:54:8f:06:9e:
                    53:0f:02:94:8e:da:89:35:73:40:7c:9a:0c:2a:89:
                    f3:aa:e5:c0:0e:98:d9:a5:91:ef:39:b5:17:07:fe:
                    f1:3c:6a:56:34:a0:51:a8:41:e9:43:91:c3:30:79:
                    99:e0:15:bd:84:59:ca:f4:7b:04:f6:37:8e:86:44:
                    b5:82:d2:5b:01:0c:f0:0f:07:8f:27:2d:e1:37:bc:
                    16:4f:e6:ae:dc:59:46:67:ef:3e:db:be:ca:45:5f:
                    85:d7:84:af:2c:8e:13:e8:79:60:3f:86:a0:91:1e:
                    2b:c6:bb:21:7d:19:d2:41:90:c5:34:c5:9c:b4:24:
                    3f:32:22:4e:f2:3e:d1:1e:72:7e:05:a9:1b:db:48:
                    b9:ab:6e:15:aa:86:34:cf:d6:62:52:2e:4e:e6:b5:
                    a4:fb:a7:a7:a6:98:fd:b5:41:a7:e5:59:e4:b0:55:
                    46:8d:ac:03:36:8d:be:d2:b5:0c:36:e9:8b:84:aa:
                    83:33:a2:dd:79:a2:65:54:ef:b1:de:03:4c:40:fa:
                    45:80:bb:3b:dd:22:d9:d3:57:5c:5f:e3:be:1a:c8:
                    af:4c:77:e9:0d:84:ae:16:0d:ce:18:6a:4a:f1:81:
                    45:c5:70:ac:a0:9a:02:c1:79:88:aa:f6:8c:a8:c6:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:B8:18:BA:3B:2A:DE:EE:EE:66:C6:35:39:92:55:3E:DA:40:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b4a0dac-4c2e-33fe-9131-f5895672a574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:71:61:06:82:6a:c2:ba:b4:b1:a6:64:53:b7:e1:46:50:
         bd:1f:ee:70:9f:d2:77:69:72:33:01:20:9b:c5:1a:33:ab:9f:
         bc:eb:81:06:44:a8:85:0f:bf:ea:48:d6:a2:4c:bf:29:37:5b:
         b1:8b:be:66:3a:24:3a:00:f0:fa:78:05:59:f7:21:03:c4:2f:
         83:e9:26:62:29:cf:54:5b:6d:de:cc:49:61:b7:ba:8b:57:c9:
         3b:74:d7:d2:73:99:6a:ba:a9:36:35:5b:1f:66:9a:87:fa:30:
         e3:97:ed:8e:c8:fd:d5:43:bd:c8:60:80:68:43:c8:72:1f:dc:
         9c:b9:f8:0e:94:3c:a3:da:7d:1e:f7:d1:cf:48:75:f4:d7:22:
         45:3e:24:95:fe:c9:db:1f:a5:aa:aa:51:1b:e5:f0:39:74:a5:
         8e:8f:78:df:84:78:d3:2b:b7:b2:f1:62:da:ed:13:c8:92:9c:
         90:c1:fe:c8:52:31:f2:50:6f:2e:ce:78:ac:ad:68:70:af:ee:
         99:db:60:1f:83:63:e0:73:87:97:c6:8a:83:43:31:5c:3d:14:
         2e:9a:b0:63:c6:99:3f:fd:8c:69:b8:11:be:51:5c:41:49:ff:
         f2:5b:4c:4d:8c:47:a1:d7:43:06:80:ee:a3:ff:5d:fc:b7:35:
         fe:93:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:00 2024 by rpki-client on console-ams.rpki-client.org