Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4ff5f-82f0-3639-9ab5-334e84d966c7.roa
File:                     21d4ff5f-82f0-3639-9ab5-334e84d966c7.roa (raw, json)
Hash identifier:          2YDYGJWsmufTy6sVUbUwBWNTxosu9//ePQKb1GpL/JI=
Subject key identifier:   19:0E:BC:70:C6:89:1A:94:05:07:88:E4:62:92:30:86:4A:57:B2:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAED895C797F78A25545180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4ff5f-82f0-3639-9ab5-334e84d966c7.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        96.73.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:d8:95:c7:97:f7:8a:25:54:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d9e67caa-a1fb-4d99-bf92-51f0bb45b94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:b4:af:6d:fc:d7:1e:b2:39:19:3b:55:a9:
                    47:80:7b:17:b4:e4:b2:a3:88:fa:4f:98:e5:1c:6a:
                    e3:41:d2:01:0c:94:17:4c:cf:9f:0e:85:e7:63:2e:
                    7b:23:a1:d8:2a:94:9f:8e:c6:ce:fb:b0:10:22:2b:
                    fa:b0:c9:71:b1:7a:b4:af:24:cb:d8:7d:16:12:36:
                    1a:b4:63:bf:22:0c:2b:45:68:e1:4f:27:1a:d9:cc:
                    a7:ed:74:0b:ee:10:35:27:2d:55:42:6f:f4:51:5b:
                    e9:b6:d4:b4:cf:57:2f:45:c2:96:13:28:99:ba:97:
                    4f:c0:5f:4f:51:31:70:6d:e9:3e:73:d5:ae:56:cb:
                    aa:6f:89:1c:04:d4:fe:37:53:17:2d:18:9a:46:7b:
                    ed:a1:87:48:20:5e:3b:10:28:80:6d:d9:fd:cf:d6:
                    f3:f6:8f:21:58:c2:44:3a:fc:07:2b:22:14:8b:72:
                    f8:72:76:72:d2:ae:e0:7b:c8:a3:22:53:58:a5:63:
                    94:17:b0:9d:61:13:c2:ed:d4:ba:6f:ba:57:cd:f8:
                    cc:ea:ed:4a:31:77:34:f9:0c:57:4e:15:22:cf:b6:
                    24:b9:6b:c0:46:85:a8:8b:cd:fc:a9:41:24:1f:2f:
                    2e:fe:0c:c0:85:ec:c0:a7:c1:21:82:20:9f:5f:7d:
                    14:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0E:BC:70:C6:89:1A:94:05:07:88:E4:62:92:30:86:4A:57:B2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4ff5f-82f0-3639-9ab5-334e84d966c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.73.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:81:28:af:c5:cf:5f:11:60:c2:66:ac:90:cd:9c:11:cc:63:
         1d:6a:7f:ab:84:9d:db:b2:9d:f9:13:49:f6:59:7b:f9:ca:06:
         ea:59:1c:75:ef:6d:18:77:a3:ea:7e:10:98:ee:49:40:3a:1a:
         0b:45:85:0a:57:9b:14:5a:2b:6b:d7:4b:ef:52:57:cb:ec:4d:
         76:61:92:b9:53:3c:16:3f:6c:a1:fc:01:e0:0e:f2:f3:2a:fa:
         5e:ab:88:04:0a:9c:ce:85:8c:95:3f:74:5a:4c:60:68:3d:4a:
         88:33:ad:85:8f:45:7d:30:4b:ea:9d:f9:cb:46:75:b8:23:93:
         d5:95:71:a7:8a:0f:36:99:55:41:72:b0:4f:c3:86:ae:22:6b:
         cd:e3:0b:fb:36:89:58:e3:52:41:e6:b5:14:38:da:10:ae:63:
         f3:82:47:ad:a8:ea:19:5f:ae:39:1a:e4:ad:2e:f7:ce:6d:31:
         72:b7:19:e5:0c:2c:1d:bd:87:c3:9a:a0:4d:67:94:da:f8:06:
         8e:fe:ad:03:b3:5e:ac:93:40:9b:56:22:76:26:97:47:1f:bb:
         7a:9d:ff:e8:49:b3:1e:5f:60:6b:89:6b:66:9b:d4:5a:3e:e4:
         c7:52:41:e1:4c:f3:96:ef:c1:f3:38:c2:45:d8:6d:a2:bd:5f:
         23:25:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:35:58 2024 by rpki-client on console-fra.rpki-client.org