Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a34d119-df8c-33a7-b5c1-0d54d54b14ce.roa
File:                     4a34d119-df8c-33a7-b5c1-0d54d54b14ce.roa (raw, json)
Hash identifier:          Qw0re/GeH1v9lyaqF4LwS0AjF+wS/kTDgGAsOKcQyis=
Subject key identifier:   E6:F2:BA:55:09:A9:D0:3A:ED:FC:12:9A:24:CC:E1:F6:8A:06:80:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6C6E5DEC14FE98837D660
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a34d119-df8c-33a7-b5c1-0d54d54b14ce.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.16.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:c6:e5:de:c1:4f:e9:88:37:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=30b83565-ce34-4d3b-a5e3-61272995b370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:4e:36:05:36:82:40:bc:60:da:8e:46:5d:
                    27:fa:66:fa:e6:34:d9:c2:4b:e4:b2:cc:23:ab:0b:
                    44:d5:1d:5b:65:ac:50:e0:a8:f5:32:25:c8:ef:40:
                    89:98:0e:23:d1:2b:d0:18:b9:76:e5:69:82:7c:bb:
                    a4:43:cc:7d:c8:59:6e:64:b9:b7:c7:c5:69:2c:38:
                    d1:82:9f:6c:2a:0c:79:be:c8:c3:e1:68:eb:fa:3b:
                    0f:0e:00:33:13:28:83:0f:0c:9c:1c:cb:28:10:15:
                    12:ee:63:f8:58:04:8c:d4:34:24:2f:00:5c:c1:31:
                    40:3f:eb:bf:76:9a:e2:97:b5:41:34:02:21:7d:da:
                    98:4c:6e:ec:79:e9:ed:bc:4b:04:6a:ac:0d:c3:56:
                    09:a7:a3:c2:77:6b:19:29:bc:af:7c:3d:19:e8:0f:
                    ef:f8:e8:16:c1:c0:f4:6c:6c:c9:d5:fb:f5:ab:63:
                    38:72:32:b4:97:24:0f:78:d4:4b:de:a4:6f:95:85:
                    de:97:ca:2f:5b:dc:07:f7:32:a1:10:03:b2:89:ac:
                    66:cc:23:02:b8:30:a3:08:fd:bd:b6:c4:d4:c2:cb:
                    ba:2c:77:14:56:63:23:ca:a1:fe:31:2b:6e:36:f3:
                    74:1b:b6:ad:51:2b:cc:4e:d6:9c:ca:99:f7:0e:68:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:BA:55:09:A9:D0:3A:ED:FC:12:9A:24:CC:E1:F6:8A:06:80:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a34d119-df8c-33a7-b5c1-0d54d54b14ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.16.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:26:be:1e:23:c4:ea:1b:ea:bf:fd:3d:22:c7:18:a5:ef:cc:
         b2:30:1c:d9:27:b3:9c:a1:b3:8f:0b:89:bc:93:4e:f0:43:d9:
         99:6d:7d:9b:b5:ff:ed:d2:63:79:8d:c2:80:1f:5f:57:cd:58:
         94:f3:06:1c:63:0a:ff:e9:44:e2:8b:6a:ad:d6:a5:3b:62:fb:
         37:12:19:b8:9f:f4:88:84:96:8b:b7:e8:d1:5c:83:10:e8:4e:
         0f:4d:af:fa:98:80:df:7c:9c:76:2c:73:4a:bf:5d:96:86:e4:
         01:0d:1c:62:b2:8a:fd:9b:5f:4d:88:d4:01:f5:9e:0f:09:37:
         b1:3c:f2:a0:6f:b2:b6:fb:76:79:b3:6e:c4:e9:a1:dd:32:f9:
         b7:f0:78:66:33:e1:90:45:86:0c:99:35:b5:ba:ba:1b:4b:bf:
         96:27:e4:cb:11:b1:59:ec:6a:32:63:e8:b5:ca:f3:da:04:6a:
         0c:9e:70:49:e1:29:7f:de:91:e3:61:f9:78:ae:c9:32:79:e3:
         49:70:9c:db:c5:5c:db:6e:dd:13:b8:69:47:b7:2a:58:60:eb:
         e8:46:09:85:df:60:a2:47:3d:2a:31:7f:91:ee:12:00:99:bd:
         08:09:31:d5:51:77:82:85:f8:74:6f:82:3d:9b:5b:27:95:88:
         33:50:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:57:51 2024 by rpki-client on console-fra.rpki-client.org