Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da60b62-06eb-355c-9a6c-1ac6f544e91e.roa
File:                     2da60b62-06eb-355c-9a6c-1ac6f544e91e.roa (raw, json)
Hash identifier:          fgrmVrBzQvCdThZpa2CNnqRrUQvXkKnrXWJZ2wbhe8k=
Subject key identifier:   5D:D3:CB:44:C2:6E:FA:5D:11:14:83:59:AD:A4:FF:91:8A:6F:B3:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFA11359557BE312E555C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da60b62-06eb-355c-9a6c-1ac6f544e91e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        73.228.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:a1:13:59:55:7b:e3:12:e5:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0eeeacb5-4476-4477-b6ea-973c688c6e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:4f:27:9a:34:fc:30:46:a9:d3:5a:2c:8c:
                    4a:63:67:8c:42:37:08:0d:fc:ad:e5:84:47:9d:c5:
                    f8:61:57:20:a1:e4:03:64:a8:67:d7:2b:03:72:e6:
                    b2:34:26:f4:20:38:76:99:b1:b5:83:bd:eb:38:67:
                    34:ed:1c:6d:73:bb:80:ea:b1:b1:12:f9:93:c8:78:
                    0b:5a:fa:fe:49:10:a1:d6:bf:5c:3e:65:12:ea:45:
                    d0:b8:98:e4:68:22:5c:c7:7a:32:a4:31:cf:28:f9:
                    eb:90:8c:6b:fd:75:78:e8:ba:ab:8b:94:0a:60:70:
                    00:0b:83:37:b9:d0:07:de:a5:25:cf:ea:8e:ad:93:
                    f5:7f:53:58:7b:85:5b:7d:92:00:65:eb:13:bc:18:
                    31:87:11:15:89:d6:d8:f2:b2:57:3e:02:b4:4c:0d:
                    6f:b9:91:c5:1a:dd:55:ea:7d:cb:01:fe:b8:84:45:
                    59:68:b5:c6:4e:14:c3:93:d1:9d:58:01:1f:5f:0a:
                    75:12:70:54:0a:4d:d2:d3:c3:35:eb:b9:47:dc:4a:
                    c5:9f:32:f4:3c:55:c4:09:12:78:15:cf:b2:43:f8:
                    e3:97:af:14:1d:a4:c1:e9:e8:a5:a3:b2:9b:af:21:
                    44:3d:73:e7:35:ef:e8:d2:68:36:7d:01:b7:12:26:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:CB:44:C2:6E:FA:5D:11:14:83:59:AD:A4:FF:91:8A:6F:B3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da60b62-06eb-355c-9a6c-1ac6f544e91e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:a3:27:9a:2b:9a:97:2b:9d:5f:f7:f6:2d:97:6e:56:c4:
         1b:01:99:ab:a9:77:67:f9:3b:a4:f4:50:55:08:ec:21:75:c2:
         63:6a:d4:fe:a9:d2:5e:de:29:51:59:ba:15:20:4a:64:b2:48:
         ab:c2:82:3f:59:1a:20:dd:3e:bd:2f:20:39:12:d1:2d:2b:00:
         b0:fa:11:b9:66:1f:2c:f3:98:f0:67:b3:d4:fc:55:1b:d0:0c:
         55:e4:72:e2:23:4f:a3:de:95:9a:fb:1b:11:95:23:c3:dc:bd:
         fe:95:60:a9:b1:43:2e:d6:02:6d:b5:72:a6:55:06:a4:c5:e8:
         6c:dd:48:38:f8:7b:cc:3e:22:97:44:47:0a:a4:d6:00:b2:11:
         74:f1:d6:e5:fe:17:b5:cd:46:7e:92:f6:39:11:7d:3f:1a:66:
         ea:74:d7:89:c4:94:6c:f7:b0:4e:a1:00:14:c2:94:89:66:76:
         d5:e4:e5:7f:17:7b:9c:9b:f9:f5:89:6e:0e:56:ab:7d:32:a3:
         57:46:42:e1:39:47:b4:97:5b:5a:30:5e:dc:49:b4:44:64:89:
         5d:c9:1a:a6:12:ec:a3:40:25:b4:0b:05:12:d2:de:66:70:0b:
         25:42:d4:b1:92:3e:ea:fa:de:04:2b:43:e1:a0:ee:49:e4:6f:
         a0:d6:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:46:36 2024 by rpki-client on console-fra.rpki-client.org