Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e608f15-4227-3e7b-a45c-e0fe7801e9b1.roa
File:                     5e608f15-4227-3e7b-a45c-e0fe7801e9b1.roa (raw, json)
Hash identifier:          VY6Lo4RU1N4+gnZ8kvn7Pp4Wpf9B16LczMhfvA+nggo=
Subject key identifier:   B9:D4:F7:1C:6A:B5:37:A4:28:2D:0A:A1:17:F2:E6:AD:9C:39:C5:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C65462D0C0B83B5B7F380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e608f15-4227-3e7b-a45c-e0fe7801e9b1.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.58.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:65:46:2d:0c:0b:83:b5:b7:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=629b7124-b889-4455-a5b5-a7a14f4891fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:99:36:bf:25:ff:c8:46:da:ed:60:bb:2b:
                    1b:a5:67:78:c4:ba:fd:45:2b:1a:74:27:c3:50:1f:
                    14:5d:ab:6e:0e:ef:97:11:e3:bb:13:ae:82:15:ed:
                    df:de:73:0a:84:ef:f6:9a:1c:3c:44:e9:98:be:e7:
                    2c:b0:4a:41:89:08:46:41:97:f0:41:63:6c:24:82:
                    fb:6c:d3:3f:55:2a:10:e8:17:da:d7:cc:73:1b:f4:
                    6c:12:fa:74:14:d1:06:9a:9e:7e:48:51:b5:30:1a:
                    28:af:9d:d0:94:4d:c0:d0:33:8e:65:bd:22:d7:b7:
                    fc:f6:36:1c:04:25:a7:2d:53:52:85:d3:11:59:fd:
                    da:10:02:91:ad:34:1d:24:50:ab:5b:2e:c2:df:63:
                    45:17:84:1b:63:3d:84:1a:b5:d3:eb:19:d0:2b:21:
                    b6:26:11:89:b3:d8:a2:ce:f3:74:f0:eb:d0:ba:0f:
                    10:25:3a:41:71:03:1a:01:06:ae:97:e5:79:c4:05:
                    a7:c4:e8:b4:4a:1d:b7:f4:cb:3e:ae:7f:30:04:67:
                    39:6f:ba:03:2c:85:0b:ca:38:98:c4:76:09:25:44:
                    3f:c9:ed:b0:6d:a9:27:16:fe:a0:dc:d9:03:1b:81:
                    b7:4a:01:ea:75:69:27:17:9c:3c:d6:cb:38:2b:ef:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:F7:1C:6A:B5:37:A4:28:2D:0A:A1:17:F2:E6:AD:9C:39:C5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e608f15-4227-3e7b-a45c-e0fe7801e9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:20:b5:7d:9b:ef:10:b8:91:cf:26:d6:49:90:17:dc:2e:
         3c:22:e2:f1:33:f5:fd:8c:bf:56:72:a7:e1:d0:7b:ec:f5:a8:
         43:73:df:db:b3:5f:e5:31:de:ba:27:15:87:c6:c0:c1:58:2e:
         8b:06:1a:aa:63:fb:a5:7e:e7:c9:ff:8e:6b:20:e5:88:4b:6a:
         ca:78:78:53:f1:df:d1:29:f0:dd:4c:03:cb:92:5e:96:ba:a5:
         d6:e2:7a:7b:17:70:a5:d8:56:dd:22:43:70:af:53:be:88:d2:
         70:39:38:ba:a9:e4:ea:23:e1:f0:0d:d7:ec:1e:70:b9:5e:a6:
         68:f5:73:44:32:e8:c0:34:65:c1:ba:bc:20:7a:af:7b:eb:e2:
         c9:d7:00:7f:22:22:ab:e0:74:ae:53:6e:76:b1:a1:6f:61:11:
         4a:1d:e2:1f:e5:70:76:b8:0d:da:8a:40:0d:9d:36:f6:a1:84:
         64:33:ae:e4:79:81:0f:da:e0:df:8f:f9:e6:8e:9f:3c:d2:43:
         8c:69:fd:55:b5:f9:da:6c:2d:02:3d:ec:20:47:2f:fe:ea:68:
         25:50:5d:68:8f:31:f7:fc:74:57:9e:73:e2:01:de:1d:a0:aa:
         91:cf:18:0c:d8:ae:01:25:4a:63:0e:4a:fd:ba:24:4f:fd:2a:
         23:20:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:24:20 2024 by rpki-client on console-ams.rpki-client.org