Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa
File:                     1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa (raw, json)
Hash identifier:          FRXxbg9VcS3NJe2HjiQPIEa7eFazByKltSGsCag9qKE=
Subject key identifier:   0B:35:96:9F:60:40:91:DC:0A:95:A1:42:4A:40:82:7D:BB:A3:AD:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C801A1023BEE3480D4F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.8.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:80:1a:10:23:be:e3:48:0d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=6687c9e1-40a3-45c4-8e3d-40213ccb76c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:92:98:84:39:d7:b5:a4:1b:bd:e8:de:a8:
                    98:5d:a7:20:04:d8:2f:49:38:6b:6f:0b:94:da:0b:
                    2c:48:9b:f1:fc:ac:23:eb:53:19:c6:2b:e4:a4:70:
                    8e:84:9b:20:d0:30:70:59:15:21:43:d5:1d:9b:21:
                    57:92:b7:aa:2a:ed:01:70:78:5e:a4:f6:94:c0:0a:
                    d5:bd:b3:80:88:4e:1b:ed:99:09:d0:eb:3b:0b:e0:
                    a0:fb:0d:c0:4a:b1:da:59:cd:49:da:2c:e6:27:e0:
                    fa:36:6c:cf:d8:7d:59:11:75:16:92:d4:8e:3c:10:
                    53:68:7a:3f:53:5b:27:0d:05:1a:a5:15:99:03:42:
                    04:62:d0:3c:80:68:c4:eb:31:d1:5d:14:d2:9e:cf:
                    32:a5:0d:a0:e5:83:70:6e:23:e7:b3:a3:a2:cc:b3:
                    ee:a5:f9:ac:ab:3d:c6:3f:97:07:09:fc:37:47:6e:
                    22:ab:63:dd:1c:8b:85:61:e9:e0:aa:43:7b:55:59:
                    39:22:85:76:65:97:8d:b5:dc:38:8b:d8:fc:48:dc:
                    03:40:85:5a:55:d3:cf:2c:56:8a:2d:2e:57:63:f1:
                    e4:c5:b5:b1:c3:32:92:28:ab:ab:4f:15:b2:f6:de:
                    da:d9:6b:62:06:04:df:5c:63:00:da:40:4c:93:62:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:96:9F:60:40:91:DC:0A:95:A1:42:4A:40:82:7D:BB:A3:AD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:37:78:8b:4f:4e:a7:a4:48:b6:cf:4f:82:01:c0:ab:ab:
         f1:b8:be:35:df:78:86:3c:e3:95:98:8c:7f:16:24:8a:3a:7a:
         f1:ec:25:0e:e1:a0:64:68:b0:01:f6:a7:aa:9a:a3:cf:b7:30:
         2a:3b:0b:22:94:a3:c8:16:7b:4b:fa:8d:83:99:33:19:80:07:
         75:ba:bc:3e:01:68:12:9c:11:21:18:c2:d7:e6:33:fd:5e:6a:
         4d:51:90:d6:39:08:38:a3:00:8d:72:f8:bd:ad:c1:50:b1:30:
         ac:10:11:7d:d9:b3:71:e6:79:3b:32:fc:d4:ba:7f:54:34:ed:
         71:42:1f:5f:19:f2:d0:b4:ee:df:c4:b2:c0:f9:f2:96:7a:fc:
         36:4c:c9:5e:6c:60:f2:27:31:13:67:72:f9:94:34:3e:91:8b:
         19:c2:91:5c:dd:1b:97:62:a1:6d:05:9b:54:f7:81:c7:54:e7:
         7a:de:47:26:55:00:67:67:86:ae:5b:af:1c:9a:1b:6c:12:72:
         46:a3:e6:b2:36:62:00:ee:90:97:f3:7f:b3:fc:41:43:4a:8d:
         a1:87:ee:2c:1b:df:9e:a6:ab:c6:91:e2:bf:bb:8a:74:10:b1:
         40:a8:ba:c3:cf:0c:a1:02:49:b1:58:e0:20:4b:51:e1:04:0a:
         51:85:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:01:51 2024 by rpki-client on console-fra.rpki-client.org