Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d309a3a-d92a-3c63-b6b8-2e735045d1cb.roa
File:                     4d309a3a-d92a-3c63-b6b8-2e735045d1cb.roa (raw, json)
Hash identifier:          VG5crQQH6uzZuTLPVSlpnUc/wgulJTC7N8E214P/K28=
Subject key identifier:   CE:B7:F9:A4:1A:3A:C8:A7:36:EA:A6:21:EB:41:57:C7:69:7F:35:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6B12F329416F17B592680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d309a3a-d92a-3c63-b6b8-2e735045d1cb.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.143.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:b1:2f:32:94:16:f1:7b:59:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=146c03ad-2757-467e-bb6d-8336a71857c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:0b:7f:9f:9e:51:32:80:26:81:9d:5e:62:
                    b9:72:4f:4b:15:6f:ee:0f:1d:7a:9b:49:4a:de:c2:
                    24:6c:2f:3f:34:7f:18:ed:11:f4:1a:39:d2:6e:13:
                    76:b0:ed:4e:eb:c6:1a:3c:ae:91:04:ad:ec:36:b4:
                    90:76:9d:50:cc:1c:b0:42:a7:0c:9a:67:20:4d:46:
                    d7:25:e5:16:2a:7f:ad:5f:c0:4d:ff:13:dc:ac:93:
                    c0:9e:43:f0:e8:b7:88:eb:65:ac:85:11:5a:f8:36:
                    fb:d6:65:25:7c:64:d2:8b:20:ce:1a:8f:36:f0:10:
                    02:6f:eb:6f:f7:43:78:0d:c7:28:1a:a0:81:84:16:
                    c6:3e:85:cc:df:42:4f:e7:6e:fb:b8:ae:d1:6d:c5:
                    41:46:b6:40:09:0c:a4:0c:fd:4e:73:42:31:fc:d2:
                    24:8c:ac:bf:be:cb:03:4f:9f:c6:22:51:80:63:60:
                    fe:28:e6:ed:17:39:7e:7a:1c:a8:7f:28:5c:b4:b8:
                    f9:3b:7f:56:43:a4:d3:05:75:02:94:20:62:34:f7:
                    45:12:c6:4d:43:54:4b:5e:67:a5:b3:3d:19:47:13:
                    7a:a1:4f:9b:28:50:90:7c:d7:3f:e6:b0:bd:e5:58:
                    96:7d:bb:2a:c3:52:c0:c0:35:98:fc:84:9d:5e:fc:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:F9:A4:1A:3A:C8:A7:36:EA:A6:21:EB:41:57:C7:69:7F:35:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d309a3a-d92a-3c63-b6b8-2e735045d1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:11:6d:5a:ec:df:0e:53:35:f8:56:a8:d6:ad:74:be:88:
         ca:91:a7:5a:41:8d:ba:81:72:04:72:e5:64:07:80:ad:bb:eb:
         b9:db:c4:d4:2b:7e:4e:01:52:fb:5b:47:1b:fc:d2:da:7d:6e:
         75:41:ff:88:e8:45:de:75:7a:96:33:61:82:28:6d:ca:28:57:
         ab:79:d6:03:90:05:47:9b:0c:cf:c2:67:aa:ac:68:d4:ce:f6:
         73:62:b9:81:c1:73:0a:93:f3:72:59:8c:30:49:2d:6b:18:71:
         51:41:4b:95:b1:80:e6:ec:4e:77:7d:46:f9:16:78:9c:b7:5a:
         1c:03:f7:f6:98:a6:77:fb:53:47:7a:0a:24:47:f8:55:97:f2:
         3d:59:8f:b1:ba:a4:53:1a:6d:38:d7:e4:6e:43:fa:e2:fd:8a:
         e4:ab:16:5c:f1:52:91:3a:7f:ba:08:c3:b8:38:24:34:15:ce:
         de:e3:b3:64:75:33:ec:20:d9:10:24:2f:60:44:79:34:f4:8d:
         40:5c:7c:02:76:38:06:73:22:2a:77:25:9e:61:65:99:17:c3:
         ca:e4:de:21:05:b8:84:8a:83:44:6d:e6:ae:e2:26:9d:e3:d0:
         4a:83:63:d7:25:f9:ec:32:c8:f6:e7:02:fd:62:69:4e:0b:df:
         24:92:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:50 2024 by rpki-client on console-ams.rpki-client.org