Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19955e79-9920-3c84-a048-ef9d9fa643e7.roa
File:                     19955e79-9920-3c84-a048-ef9d9fa643e7.roa (raw, json)
Hash identifier:          mwquYmFvSKKO6loujh92ehreuC9D/M1oxdbOXyZUTlc=
Subject key identifier:   0F:8C:D6:91:0B:F6:C6:C9:0A:C9:63:5B:9D:B3:30:95:75:BE:C1:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C690901EE1A9AF2A12EF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19955e79-9920-3c84-a048-ef9d9fa643e7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        71.233.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:90:90:1e:e1:a9:af:2a:12:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=61305ca6-1e48-4c56-9d5c-726b93e7c79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:49:38:5e:83:a4:45:ab:a7:1f:e3:a8:6d:
                    b9:ff:46:e9:77:96:ca:2c:ac:22:b7:68:17:d5:cf:
                    61:b3:18:cd:50:e7:66:a6:67:cb:08:21:95:9d:d7:
                    d7:0e:ab:2d:8b:06:51:85:c8:d4:78:96:b5:a4:17:
                    90:d4:f5:af:75:42:5d:3e:0f:ff:97:d8:7a:32:f6:
                    52:4f:9f:d9:37:67:02:01:11:39:e0:a1:da:de:60:
                    27:6a:61:a2:df:87:98:d9:b4:5c:dc:07:a6:fc:e1:
                    62:62:57:e0:05:34:6f:30:ce:57:3b:c4:95:f6:44:
                    3d:62:72:9f:04:8f:17:86:58:60:38:da:fa:98:b0:
                    bd:5a:e6:14:46:47:b1:25:9f:28:b2:64:15:17:c2:
                    b5:b4:94:8b:04:a4:8b:5b:95:28:9d:02:92:2b:bc:
                    4b:2d:3b:f8:5b:6c:36:3e:b2:4b:1c:27:fe:07:4c:
                    b9:11:3d:c6:6b:d5:ea:1f:92:87:29:43:68:39:b1:
                    09:42:c7:5a:76:3b:2b:ab:9e:5a:c5:7a:7d:10:9e:
                    a1:9f:89:82:62:27:fc:47:15:e8:cd:c8:d7:1f:99:
                    ae:c7:5c:3f:99:d6:a0:cc:bf:eb:16:75:95:d3:7d:
                    cc:9f:87:f0:42:ae:82:83:42:e2:a6:8d:26:f5:c0:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8C:D6:91:0B:F6:C6:C9:0A:C9:63:5B:9D:B3:30:95:75:BE:C1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19955e79-9920-3c84-a048-ef9d9fa643e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.233.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:12:8d:5c:f5:5d:20:64:92:be:e4:96:d8:d1:40:64:77:e0:
         a0:ae:c5:c4:fa:f5:e3:32:09:fd:73:0b:ba:59:68:f7:ea:5e:
         7d:a7:63:df:5e:13:16:9c:5b:0b:a0:e5:82:d5:38:ff:f0:d7:
         8f:55:82:a6:bd:55:88:db:21:b1:00:65:f0:64:eb:01:ad:6b:
         15:36:2e:0a:18:e7:94:c7:75:88:93:77:f7:24:c1:4d:5d:91:
         4b:10:2e:65:14:f7:18:86:c6:8b:61:a3:bd:4a:79:02:0d:ce:
         2b:dc:8a:72:65:e0:75:ca:58:07:d7:4e:a3:93:be:1c:a5:2e:
         40:a1:e3:6a:aa:b1:f0:65:91:ee:df:8a:9f:f3:b5:4b:cb:16:
         20:23:82:8a:04:9a:54:63:a5:9a:7f:b7:8b:19:9d:aa:fa:af:
         57:b1:6f:11:6b:fa:28:cc:f3:a6:16:49:85:45:12:a9:cf:b3:
         2c:3c:61:d5:31:c2:7e:88:1f:c8:53:0a:c5:c7:bd:28:85:c7:
         8e:c8:c8:fe:c1:9e:ee:8b:d2:ac:be:80:51:cb:ad:20:89:39:
         95:3d:3c:0c:4c:c9:d2:aa:1b:be:d8:c0:8e:f8:b3:95:b9:df:
         65:11:31:82:ac:7a:a4:1d:a1:82:2e:07:12:10:a2:8c:37:3e:
         3e:dd:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:14 2024 by rpki-client on console-ams.rpki-client.org