Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cb6cd8f-d531-316c-927f-5e101bdcd979.roa
File:                     1cb6cd8f-d531-316c-927f-5e101bdcd979.roa (raw, json)
Hash identifier:          mEL6cBBwIBqgK5P7zKEg5/HfhnkqJpBPfXdQCN+55Zg=
Subject key identifier:   0F:47:8E:99:6B:05:52:AB:C8:86:78:DC:57:C4:BF:8F:AD:4D:C6:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89AF2E9A6A0AA5DC4341E7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cb6cd8f-d531-316c-927f-5e101bdcd979.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.195.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:af:2e:9a:6a:0a:a5:dc:43:41:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=d159557f-5d15-4392-a184-803207ad58ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:a4:2f:17:ae:05:fc:94:b9:34:36:04:c9:
                    71:16:34:60:14:73:81:0b:33:88:13:65:bf:92:57:
                    2f:0a:f6:42:68:35:d4:d9:29:cb:56:35:55:9c:7e:
                    22:e7:34:c4:5b:24:39:72:3d:03:0d:07:8b:08:87:
                    be:64:b8:9f:86:44:1c:8f:76:95:56:f5:dc:e3:7e:
                    1d:b6:7a:31:38:be:f1:1a:5b:06:f2:00:ce:f8:30:
                    af:9e:2f:92:1a:3d:02:45:73:55:eb:d7:87:8b:fc:
                    44:41:4a:29:d4:13:f1:8d:d8:5a:65:2c:7c:a5:64:
                    26:7d:89:90:61:16:35:be:0c:70:69:19:e4:c1:52:
                    24:45:ff:89:3d:ad:a8:24:81:86:96:32:7b:fc:9c:
                    fe:b9:2b:fb:f7:16:c2:c2:45:7c:5c:54:c5:0f:f8:
                    39:7c:ae:8e:18:ad:51:55:83:d9:40:02:89:bc:88:
                    3f:86:d5:b4:44:be:43:50:62:b7:a6:db:28:8b:2d:
                    d6:55:34:37:fe:8b:50:af:d8:77:eb:55:7b:f1:b2:
                    e1:00:f0:d7:19:bd:3f:3a:ad:2d:4f:47:cc:7f:8a:
                    4f:c7:2f:a5:74:8a:b7:45:08:aa:47:b0:0d:6f:53:
                    83:f7:9f:b8:49:89:78:a7:d7:9b:d7:24:ca:26:fc:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:8E:99:6B:05:52:AB:C8:86:78:DC:57:C4:BF:8F:AD:4D:C6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cb6cd8f-d531-316c-927f-5e101bdcd979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:a8:7b:5e:bd:78:fa:df:b7:11:4d:e3:22:9d:bf:c3:6d:
         e7:63:0c:cf:f8:01:45:4c:7d:f5:51:3e:ae:40:51:ed:52:72:
         c0:27:c7:a7:2a:bd:8c:a1:65:cf:b0:24:12:90:a5:03:b4:9b:
         36:57:08:17:fe:6e:95:08:17:e8:f2:9c:20:b6:4d:a8:cb:af:
         72:2d:01:63:d5:d3:1d:d4:f0:e7:0c:fd:ea:2b:1d:f6:b8:75:
         20:94:22:65:af:0f:9d:f5:7b:84:2c:38:ab:40:da:af:11:83:
         34:a9:36:fd:c0:b3:76:9b:1b:3a:75:09:22:e8:c9:81:fb:37:
         e8:3a:cc:56:b0:2f:a9:38:71:14:e6:2e:6d:e5:9c:8d:88:23:
         66:81:ae:9a:25:24:d8:e4:7a:9c:3a:52:63:5c:6e:c7:1e:08:
         01:ee:06:34:8e:b7:1c:21:5f:93:19:ca:84:40:9a:cf:37:0e:
         27:8f:fb:2d:4d:12:d2:bc:3a:8d:58:10:3e:85:3d:1c:f1:76:
         ab:54:fc:e0:3a:d8:7e:aa:de:28:04:6c:f3:19:75:b7:30:c8:
         c9:e0:d6:05:f4:0c:2a:bc:b1:ab:cb:16:d7:89:6b:23:b2:d4:
         8e:ee:2b:a3:0d:e1:f1:e5:18:ef:ad:fd:49:f0:46:f9:5d:83:
         64:ed:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:14:51 2024 by rpki-client on console-ams.rpki-client.org