Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa
File:                     20da560d-ae1f-3b0a-9d1a-02524d78413d.roa (raw, json)
Hash identifier:          5uElQtHOXWzBA2sy8BPtcRvjQkJMaY3Ww10x9cK9s6Y=
Subject key identifier:   0D:88:31:D9:C0:B0:2E:3A:45:0B:80:76:B4:0B:18:9A:98:4B:25:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7BEBDB7081E02C313A680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        73.5.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:be:bd:b7:08:1e:02:c3:13:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=3e0bf26e-ce03-4fe7-a4f9-658506361b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:57:68:fa:f0:e2:1e:6b:de:ea:50:31:6e:
                    a7:43:18:87:ba:16:43:5f:35:cf:d2:18:43:a1:d4:
                    14:2c:50:fe:b8:e2:42:e4:9c:7f:0d:38:54:08:dc:
                    bd:da:27:1a:e8:34:78:e4:af:75:1c:89:86:af:ea:
                    22:59:ce:c6:86:0e:bb:09:0c:da:4f:68:3d:72:50:
                    7a:d3:b8:bf:b0:4a:6b:d6:dd:17:b1:77:b4:a5:a0:
                    cd:03:1c:54:f9:d0:2a:cc:23:9a:05:c7:d2:27:8a:
                    dc:13:26:c5:b1:fa:c2:8b:d9:de:07:0c:bd:1e:b3:
                    42:47:95:fe:d6:93:3f:b9:95:68:06:fe:a5:4f:40:
                    06:42:74:0f:e4:f0:5a:68:3b:c2:8b:1c:11:4f:1e:
                    8f:0d:b7:fc:aa:3d:40:05:85:84:64:11:cc:2b:38:
                    c9:5d:4d:f4:b1:19:21:d7:1b:82:72:3d:53:1e:a5:
                    96:39:a2:51:ff:1c:b3:00:c5:5b:af:81:12:c0:8b:
                    79:6d:9c:2e:58:8f:54:4b:51:60:b4:97:a5:70:af:
                    37:b8:bb:a6:39:4c:23:cd:8e:9e:6a:e0:8d:47:64:
                    40:09:71:f8:65:69:69:7b:93:9b:94:eb:a0:b3:9a:
                    ba:5f:94:c6:7c:e3:bb:29:aa:42:15:a7:32:46:de:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:88:31:D9:C0:B0:2E:3A:45:0B:80:76:B4:0B:18:9A:98:4B:25:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.5.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:7e:c2:23:d9:2c:01:0d:69:9d:8a:4d:4f:00:5f:4e:63:
         50:c8:97:c9:fc:2b:47:bb:09:58:a1:df:34:f0:94:da:83:27:
         d2:b6:94:ea:a7:9d:99:40:aa:62:3e:73:85:09:32:3b:a0:91:
         30:05:ba:a6:db:20:4c:c1:7b:3a:1f:87:12:dc:ed:eb:32:0c:
         82:33:c1:ec:b5:50:dc:8a:fd:53:c6:d4:cd:dc:31:a0:b4:cb:
         1a:46:84:d6:2b:53:21:0f:23:17:82:83:0e:e0:07:7b:f9:5f:
         49:39:b3:38:86:f2:3b:3f:74:0f:c0:72:07:ca:02:dd:90:01:
         e9:76:bb:02:f3:9d:ac:71:9b:83:13:eb:a4:d9:b3:df:52:b8:
         92:5d:15:fd:00:42:39:9e:cd:b6:fe:67:23:12:52:3d:4c:2c:
         6a:ef:5d:8d:00:4c:c3:82:b6:0b:15:56:fc:63:39:e1:fe:a7:
         60:29:b7:7a:00:ce:97:55:b7:9c:fb:7e:46:0f:1d:f5:92:44:
         af:51:1d:67:6c:f2:d5:ad:73:f0:ce:38:dc:08:ef:4d:45:93:
         ac:74:a1:65:fa:91:37:cd:20:9a:8a:a2:f7:89:ac:d8:ba:1e:
         82:d6:e3:f0:52:a3:bb:1b:80:52:94:ce:ac:6a:af:77:58:a3:
         71:7a:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:48:19 2024 by rpki-client on console-ams.rpki-client.org