Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541eb0cc-e705-3667-b8d6-de45c5b34957.roa
File:                     541eb0cc-e705-3667-b8d6-de45c5b34957.roa (raw, json)
Hash identifier:          RVmhuCtWFqeMlFy4F3RAz6PMABq+jO5+ZRrv/wS6wu0=
Subject key identifier:   2E:74:CA:C5:94:A6:C6:5C:82:D2:2E:1A:E9:C0:72:36:75:3A:5D:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7C17278D5E5782E51A578
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541eb0cc-e705-3667-b8d6-de45c5b34957.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        73.62.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:c1:72:78:d5:e5:78:2e:51:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=80910007-7bcb-41f7-9505-ea243cdb52fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:d1:d0:52:66:ce:90:03:56:23:73:ae:70:
                    f9:53:bc:36:b6:e0:13:b4:c2:5a:4e:03:4a:91:dc:
                    6a:d1:a6:49:94:e4:b2:19:42:57:1c:9d:95:5e:82:
                    c8:ae:80:50:6b:ef:09:03:f2:ec:77:4c:c7:8d:63:
                    36:e4:47:d9:98:96:1d:44:a4:66:72:95:1f:f9:c2:
                    35:c5:1a:d3:c2:82:e6:bd:07:22:99:2c:33:9f:44:
                    d6:cd:82:4b:b3:a9:21:4d:99:4a:23:01:c6:ce:3f:
                    7b:63:86:f4:af:ed:1a:a4:dd:eb:9e:9d:2c:be:0f:
                    d5:5f:c5:7d:96:44:9e:8f:88:a0:25:99:0e:16:7f:
                    59:41:46:0c:ea:ae:57:4c:c3:8b:af:f3:cf:24:f0:
                    83:47:5c:2b:df:33:3e:36:a2:9c:79:28:85:35:6b:
                    51:0f:54:16:05:e0:47:54:dd:9c:c4:bf:f8:10:cf:
                    5b:03:db:56:b8:33:e5:21:f0:53:71:07:41:0c:34:
                    a4:bc:bd:e5:fe:bb:ae:8d:64:41:1a:23:22:84:ea:
                    aa:16:5f:ac:a8:f2:df:d3:55:0e:1c:f3:c5:95:10:
                    9f:5d:06:74:d6:93:68:05:c6:42:2b:b4:0a:46:f0:
                    78:3f:e5:44:0b:82:4f:23:78:77:e7:df:16:04:ef:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:74:CA:C5:94:A6:C6:5C:82:D2:2E:1A:E9:C0:72:36:75:3A:5D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541eb0cc-e705-3667-b8d6-de45c5b34957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.62.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:0a:a3:f2:a6:c7:50:03:53:d4:0a:d0:50:1d:23:71:41:
         a7:69:0c:0a:b0:d7:f6:dd:7e:46:df:3e:74:0f:52:29:c8:e7:
         09:68:cf:ee:48:4b:e5:7b:6f:db:4e:9f:7c:57:e3:bd:6b:da:
         60:29:37:2a:87:b5:87:de:bd:59:85:2d:51:d2:aa:a6:ba:b5:
         e6:57:6c:cb:71:c9:c2:e6:f7:92:04:b5:bc:0b:69:4a:d5:36:
         ba:f9:d1:e9:50:d6:08:4e:bf:88:37:4b:32:d1:ba:df:e7:fc:
         68:83:45:b3:66:50:25:28:9e:c4:c2:4f:86:b8:4f:b5:14:1c:
         c5:d7:f9:64:a5:08:61:12:85:61:ef:f9:71:37:a4:eb:a6:e5:
         9b:c2:55:fe:b7:ef:d4:c2:8c:07:52:71:b2:98:38:85:aa:85:
         90:35:23:7b:01:fd:75:0c:e2:f8:f1:a4:f2:4e:3f:36:f4:a6:
         31:74:26:3b:85:a4:f4:dd:a6:f5:f3:0a:bc:3d:85:35:02:8d:
         30:43:06:63:35:c1:92:d0:2c:8d:c7:0c:cd:41:15:3f:04:a6:
         00:52:69:7d:be:5d:a0:7d:2d:0f:71:41:9a:18:a7:bc:9d:da:
         3b:13:10:5e:f5:cf:f1:92:6f:4f:0f:11:5b:88:0c:dd:3f:56:
         eb:05:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:57:54 2024 by rpki-client on console-ams.rpki-client.org