Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2145d01e-a378-30ce-9000-541041953fe7.roa
File:                     2145d01e-a378-30ce-9000-541041953fe7.roa (raw, json)
Hash identifier:          B3gVkBmnMuPt9AXKM+bbATjSdtxtAd7s1fCsLmIwHwo=
Subject key identifier:   27:A8:1E:BF:C4:DC:BA:E8:B6:F0:29:63:EA:E1:42:D7:19:A0:12:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C43837EC9F6CA4970D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2145d01e-a378-30ce-9000-541041953fe7.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.246.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:43:83:7e:c9:f6:ca:49:70:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f386ccc3-ae33-4236-b0d6-3a001452c705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:75:b8:40:7e:78:3f:57:40:2c:56:49:fb:
                    e3:50:f6:1f:a7:f9:78:33:ad:94:d4:ea:e1:86:f4:
                    91:ff:15:e1:01:ab:43:72:87:0d:29:f1:88:6c:cd:
                    8d:10:3d:8d:6a:73:74:69:c6:4c:73:ba:b9:b4:92:
                    e3:1c:52:05:3a:dc:16:fb:a7:a4:32:9f:6b:04:40:
                    91:0a:2a:d0:ad:6c:c4:1a:5a:b5:b4:8b:33:9b:ce:
                    ea:33:40:eb:d0:58:50:55:b1:14:a1:ca:f0:9a:aa:
                    15:0e:32:0c:a1:bc:98:90:73:8f:5d:3a:56:05:c1:
                    88:24:70:56:7d:b5:76:be:92:e8:8d:37:b5:07:11:
                    c6:23:49:6d:0c:ce:e2:c1:b1:6f:d0:2a:0f:61:73:
                    74:eb:2c:29:00:43:66:7f:05:fc:f1:f3:e5:91:cc:
                    73:09:ed:cb:aa:d6:50:ad:30:34:cc:8c:ba:2a:1b:
                    fc:67:16:c7:4e:75:c1:78:d7:5e:6c:61:6c:25:fa:
                    67:8a:30:3d:65:fd:2c:90:de:25:74:31:ee:0c:4c:
                    6b:24:2e:0c:44:6f:9c:b3:f1:33:0f:6d:c5:80:c0:
                    5e:78:7e:84:aa:d1:f4:6c:13:0d:3f:c1:cc:59:57:
                    51:47:2e:17:06:7f:c4:2d:2e:85:a2:fd:d2:4e:87:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:1E:BF:C4:DC:BA:E8:B6:F0:29:63:EA:E1:42:D7:19:A0:12:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2145d01e-a378-30ce-9000-541041953fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:9a:30:88:4c:60:70:75:90:57:1d:e7:f8:a6:e6:08:90:00:
         aa:3f:4b:c1:55:28:c3:5e:2a:16:b8:94:a7:1c:2c:13:8c:6d:
         d0:17:84:1c:d3:41:f5:5b:b7:ad:8b:f6:c1:92:d2:8d:0b:29:
         56:85:2e:15:bb:15:48:1a:0a:ac:af:53:40:1a:92:1c:4e:1c:
         32:44:4f:41:a9:af:29:2a:e9:ac:2b:0c:31:a7:ca:4d:74:48:
         ec:e3:f0:21:46:3b:99:6c:b8:0c:d6:4e:15:ba:45:a7:fe:fa:
         5e:1d:bc:ae:5e:0c:69:6a:7b:a0:90:bd:6d:02:75:a9:a0:72:
         8c:e8:46:3c:07:73:7e:65:fa:90:dd:4e:fc:97:81:42:67:ac:
         db:1e:69:3e:85:94:33:6f:c3:d8:f3:e6:64:4c:54:17:38:c5:
         10:1f:c3:e0:b1:63:eb:73:61:ca:6d:27:e6:5c:d6:80:9a:43:
         84:35:08:f1:7c:55:3b:3d:cb:04:e8:1b:70:1d:99:49:e1:8b:
         64:8f:87:85:11:16:ba:a5:99:a4:e0:8c:a9:01:01:da:74:48:
         3f:9c:f9:0e:50:32:26:9d:a3:5c:69:0b:c4:e9:30:b0:90:b8:
         a1:57:c8:6a:d0:03:33:eb:63:80:28:a2:6f:5c:65:35:a3:b6:
         61:47:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:02:27 2024 by rpki-client on console-fra.rpki-client.org