Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5894c2d3-9937-3d3a-aa2e-15abb7ad55ba.roa
File:                     5894c2d3-9937-3d3a-aa2e-15abb7ad55ba.roa (raw, json)
Hash identifier:          QFGeLhco7+u8OcdD/WvDoUMbXhTRJ2G9OZrxct6fLAc=
Subject key identifier:   23:62:0F:0D:9F:4A:2D:3B:4A:A8:7C:17:CA:9D:B7:27:28:34:6D:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB52B0CE28E6285654C6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5894c2d3-9937-3d3a-aa2e-15abb7ad55ba.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        73.185.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:52:b0:ce:28:e6:28:56:54:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a9aa4925-0f8b-4049-9ad1-dae82ab1d186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:00:b5:2e:e4:b7:c9:c7:a5:07:a3:e3:7b:
                    7d:8e:e8:47:80:ed:e3:9a:ce:31:06:0f:e0:76:1a:
                    69:42:3c:b9:72:2c:69:a0:c3:0c:a6:4f:4e:3f:f5:
                    63:b6:46:42:c6:f6:35:96:29:59:ec:fe:06:cf:a7:
                    da:46:97:d8:d1:e4:65:16:d3:ca:cf:7c:48:82:17:
                    c4:d3:da:8d:0f:58:34:12:87:cb:4b:f7:cf:dc:6f:
                    25:7f:c9:33:c9:67:0f:d6:e4:a6:72:9e:8c:2d:56:
                    13:7c:d1:8a:55:f6:c6:c9:81:b6:2b:17:6d:80:90:
                    ad:07:2c:28:6f:42:ce:f1:11:92:f0:89:95:1f:f7:
                    97:bd:bf:bb:01:90:16:3d:46:50:bf:16:fe:e5:cc:
                    9a:34:55:aa:25:03:4d:82:89:a8:b1:4a:f4:e0:92:
                    c3:70:88:f9:64:7b:f5:22:1c:e3:69:32:83:39:de:
                    dd:9a:41:2b:7d:4f:f0:b8:1c:57:6f:8f:b5:c4:8b:
                    ef:30:08:24:55:fd:c9:00:1d:64:31:ab:7e:34:73:
                    fb:da:3a:d0:38:63:ea:12:ba:41:20:77:b6:59:c0:
                    ef:56:29:e8:58:3d:6f:b2:d4:f6:98:29:4e:d5:d9:
                    2d:d1:4a:1a:c0:4d:64:79:eb:8f:09:98:6c:f0:a0:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:0F:0D:9F:4A:2D:3B:4A:A8:7C:17:CA:9D:B7:27:28:34:6D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5894c2d3-9937-3d3a-aa2e-15abb7ad55ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.185.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:14:78:49:2e:c5:b8:8f:92:31:79:44:8f:de:38:01:c6:
         a9:27:17:6d:ce:2d:ea:2d:69:44:3c:19:be:ca:b6:6a:67:f1:
         7f:d9:85:a8:6f:6b:9e:dc:e8:81:ce:c4:bc:c2:55:0c:70:2a:
         7a:73:c4:c0:f0:2d:c7:c7:45:d8:da:75:30:3f:bf:e9:b8:13:
         2d:4a:8f:c1:12:06:b5:91:e2:33:b0:a7:c3:8d:77:fc:e6:b7:
         1d:06:ec:63:23:93:ee:e1:e0:ee:1d:aa:eb:ae:2b:56:de:d4:
         88:53:7d:39:f0:f7:90:5d:a2:a4:0f:6f:21:c9:5c:14:e0:06:
         48:50:6e:ff:b6:be:fb:75:ff:3f:9f:e2:49:a7:12:09:92:b1:
         57:df:ab:7b:0a:81:a1:bf:ee:e2:b1:f0:03:fc:dd:4b:3f:37:
         33:14:83:a3:ea:41:6f:61:52:ac:6c:00:3a:78:e0:22:32:e8:
         9e:0b:42:8e:e5:df:d5:4f:a6:3f:17:a7:3f:d1:0b:50:07:66:
         f8:97:12:75:3e:47:e0:a5:68:d8:2a:3a:88:9f:59:f0:a4:a1:
         89:9a:26:19:9a:0a:7e:10:41:29:dd:75:75:4c:34:e3:03:5d:
         5b:68:96:8c:8e:8d:27:28:2a:13:19:f3:3b:a3:eb:5f:45:4a:
         9e:83:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:58:50 2024 by rpki-client on console-ams.rpki-client.org