Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559615f8-89a8-37d5-bb53-38cbe2e07af7.roa
File:                     559615f8-89a8-37d5-bb53-38cbe2e07af7.roa (raw, json)
Hash identifier:          jEj0iEyrlqwqLxOQZtt6W11Vg/AuZP3ZLMNUU6n8usc=
Subject key identifier:   66:07:0E:10:19:34:08:FD:D1:0D:ED:90:7B:AE:E7:BC:D3:5D:F7:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BBC00470AA8BF762BAD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559615f8-89a8-37d5-bb53-38cbe2e07af7.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        67.173.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:bc:00:47:0a:a8:bf:76:2b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b5f1f2b6-d7eb-495a-9d5d-1e4b8c1ad84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:f2:a6:79:cc:05:a3:a0:6a:63:84:1c:37:
                    6e:3d:03:bd:2a:02:2e:c6:69:cd:96:a9:c9:56:5e:
                    21:33:46:7b:bc:6c:93:b7:17:68:13:31:2c:b7:cf:
                    20:cd:29:73:45:cf:9d:bd:86:56:06:9d:40:7d:74:
                    03:8d:d0:be:04:cd:38:00:cb:0d:f7:b5:68:51:44:
                    dc:6f:c5:c8:73:a3:c2:b3:4d:6e:70:be:29:5b:13:
                    38:e5:a5:02:ce:66:b7:7d:7d:6b:be:6c:07:4b:5b:
                    aa:4c:1d:0a:28:5a:31:02:d4:1e:f8:2d:f0:be:9f:
                    ba:6d:88:af:1d:59:a2:0c:2d:f4:a8:94:01:92:0c:
                    d3:05:1e:68:0c:91:19:de:d1:0f:e7:e3:53:b1:de:
                    06:3b:2e:d6:fd:28:8e:03:69:6a:b9:75:95:d0:ee:
                    ed:0a:ea:4e:ab:6f:e8:ae:8c:d9:bd:9c:71:68:4e:
                    ce:7c:73:d8:cb:59:d4:b5:ed:67:be:44:f9:06:2f:
                    f1:22:3f:25:e7:37:4b:e1:56:a5:f0:0e:c1:40:f7:
                    66:7c:9f:79:83:e1:b5:b3:a1:b9:b0:a1:51:ef:1c:
                    ed:37:c2:15:dd:81:2c:5e:57:91:2d:fe:ca:ae:b7:
                    33:df:50:9e:5d:de:c8:61:ec:3b:3f:1f:64:67:ed:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:0E:10:19:34:08:FD:D1:0D:ED:90:7B:AE:E7:BC:D3:5D:F7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559615f8-89a8-37d5-bb53-38cbe2e07af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.173.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:52:d9:42:a3:72:f6:15:a1:81:c4:cb:85:3b:94:a9:59:1d:
         1e:b9:e2:b2:0d:2d:78:8a:2a:0c:26:42:df:2d:3d:39:ed:3f:
         a7:23:a8:76:ca:f6:ce:e4:08:82:6a:60:cb:07:bd:48:d3:0b:
         ec:cf:8c:7f:cb:2f:b6:a3:22:6d:e8:f5:c0:bf:ce:0a:f6:69:
         1f:4c:5e:22:d7:c4:55:84:af:a8:79:90:70:dd:ea:52:f6:45:
         42:7f:13:1e:be:3a:ec:16:09:07:a7:d0:03:e8:c4:28:6e:dd:
         aa:2d:3c:a2:e0:d9:ec:ab:59:a3:9d:e7:78:48:80:a9:a9:ce:
         a0:25:78:77:23:63:3a:1c:04:36:84:04:2f:c9:b9:56:6b:0b:
         7d:36:a6:30:76:14:a2:d5:fe:bc:52:57:b4:a1:dd:11:0e:a7:
         ba:c3:83:8b:c9:9a:05:a3:e3:7f:b7:fa:30:d3:c5:4c:c9:3f:
         6d:63:83:e0:3c:a7:bc:d8:b2:1a:7c:60:c0:30:72:26:53:b4:
         10:c8:20:73:f1:b9:1f:a4:cc:39:39:0c:19:bf:56:eb:87:69:
         b0:da:de:39:ea:46:1d:ba:a8:6c:0e:fc:12:6d:64:f8:0d:36:
         cf:e9:ab:fd:85:82:d3:7a:d1:e1:2a:8b:e5:7d:87:04:98:df:
         7d:48:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:11:19 2024 by rpki-client on console-fra.rpki-client.org