Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4974f07f-444a-3151-832c-efc6237f8167.roa
File:                     4974f07f-444a-3151-832c-efc6237f8167.roa (raw, json)
Hash identifier:          i76ISvoazPV6TCGvhPwzDT+ribQfGK3gwIGzSAoJZRE=
Subject key identifier:   19:8F:2A:92:7B:2C:03:C7:BC:EC:B1:7E:A2:70:3A:DB:56:17:55:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89AAAFB96D5B7ABBA51494
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4974f07f-444a-3151-832c-efc6237f8167.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.194.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:aa:af:b9:6d:5b:7a:bb:a5:14:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=407abf4a-306c-4da3-a635-84763621536c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:70:81:45:f1:30:8a:88:8f:83:d9:0e:80:
                    c6:a7:d6:e9:e4:6c:59:b4:9d:39:14:9b:a6:e2:4a:
                    33:76:0a:8e:e3:87:4e:87:1c:c1:2e:c0:97:97:7d:
                    f4:6b:5f:d2:14:86:32:c8:ca:87:45:5f:80:81:5d:
                    22:0c:04:52:78:1b:71:71:d0:22:ea:d7:f9:f1:44:
                    c2:74:6a:a8:83:18:cc:76:f9:f2:e3:64:19:f8:16:
                    7a:94:48:ca:2e:5b:33:96:cd:0f:86:0e:ba:96:b3:
                    95:7e:72:4c:a6:5e:2f:68:33:b6:f6:31:5b:cb:fe:
                    7b:96:60:f7:d5:ad:50:22:8d:07:cf:f6:97:f2:6d:
                    d3:c6:76:23:5b:7b:5a:07:85:aa:84:74:90:1e:c8:
                    4d:85:83:e8:60:f1:11:7b:38:b1:17:48:12:78:09:
                    87:c3:69:48:a1:e3:da:9a:a3:90:d8:6d:da:4b:7b:
                    72:ed:46:e3:e8:c8:43:52:ad:82:77:2e:90:a9:cf:
                    f0:c3:32:10:c9:90:43:83:20:86:f8:67:ab:f4:30:
                    d6:d2:d3:52:fd:52:cc:a0:64:98:72:75:18:58:0b:
                    15:8a:64:c7:3c:3c:85:8f:a0:47:06:61:10:a1:7f:
                    3c:44:fc:51:e1:e2:bc:91:4e:8e:98:b0:65:c2:7e:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:2A:92:7B:2C:03:C7:BC:EC:B1:7E:A2:70:3A:DB:56:17:55:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4974f07f-444a-3151-832c-efc6237f8167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:06:ab:4c:a0:f0:91:55:91:b3:43:5c:05:93:2c:1f:44:2f:
         2e:bd:a8:42:95:c0:0a:6f:c4:8d:0d:a1:c4:3d:e4:9e:02:0c:
         f0:b3:ed:12:44:b7:0c:5b:8f:c6:50:75:c1:bc:13:3d:9f:87:
         d1:42:98:a6:7d:e4:32:6c:ad:72:47:95:b3:a4:5d:e7:bd:d5:
         74:1d:f7:ee:0e:a3:47:7c:81:b4:ae:d5:d9:ec:6a:b2:7c:a3:
         80:2a:86:07:1d:9c:1e:c5:f0:2c:2f:b5:1f:68:ca:fc:01:d7:
         ab:08:d2:b5:72:45:61:83:ac:c9:5e:70:8b:68:c4:03:b4:e7:
         12:58:d9:4b:a3:ed:21:13:b6:e1:35:ac:c9:a3:b1:18:e9:78:
         eb:b5:94:54:21:18:78:bc:99:e7:f6:57:9d:82:0a:4a:85:e7:
         ec:3f:f1:c7:a0:1c:63:b8:e7:1d:c0:9a:9e:d0:7c:59:e1:d9:
         9b:3c:26:2a:66:7f:b3:ff:c0:71:a6:dd:28:21:28:3c:de:65:
         fe:d2:59:36:10:90:32:9f:84:b0:66:df:cb:51:3e:55:55:c2:
         64:7d:35:46:b2:bb:6f:e1:2f:de:3b:9d:fc:a9:20:d5:43:7f:
         48:cc:84:a9:d7:bd:ce:cb:6a:7b:02:a4:c7:24:39:4b:00:a1:
         c8:db:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:16:47 2024 by rpki-client on console-ams.rpki-client.org