Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a688be-f62b-3965-8269-f9ce789a3bbc.roa
File:                     62a688be-f62b-3965-8269-f9ce789a3bbc.roa (raw, json)
Hash identifier:          MPIiKWMlC4xLfLCFQMefyj++bIDfkBKktNYsnuzcJz8=
Subject key identifier:   8E:FA:53:5E:B8:52:D6:51:00:9D:AD:5E:BF:5E:BB:81:E5:1F:E9:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E8FEC0418CEFD4FE12080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a688be-f62b-3965-8269-f9ce789a3bbc.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.195.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:8f:ec:04:18:ce:fd:4f:e1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=1b0441b6-28b3-4fd0-a724-4cc1ab0eefe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:16:9d:20:31:82:5a:39:ba:8b:5e:d0:19:
                    09:bc:f3:2a:0c:02:96:b5:79:5d:b6:10:0c:48:ac:
                    e8:1e:d1:56:e7:fc:d9:bd:55:66:89:62:f9:5f:8b:
                    f3:38:ad:a4:de:fa:79:ae:91:ae:b3:9f:47:9e:21:
                    30:78:bc:e2:de:79:56:93:66:5e:5f:81:c7:f3:83:
                    5d:92:d1:8a:16:b6:74:ec:60:82:64:1a:0b:29:56:
                    aa:bb:c8:ab:7c:58:0b:f5:74:5a:f0:34:74:19:32:
                    ee:ce:7c:6f:ff:ef:f6:36:47:f9:8d:a9:ac:6a:65:
                    ad:21:57:22:40:45:17:29:82:7a:d4:ee:e6:c1:86:
                    fb:bf:93:98:0c:7c:a9:e4:02:86:48:cc:48:0f:77:
                    1b:4e:16:2b:39:c9:3d:82:ff:00:ff:a5:8f:d5:68:
                    a4:a9:be:81:3d:24:29:04:ef:1d:20:da:4d:36:13:
                    4d:5b:22:8c:85:d9:05:8f:70:26:62:e5:77:79:09:
                    a0:7a:3f:5c:8f:a5:7e:16:0e:d6:a8:10:02:9c:2e:
                    81:17:41:94:40:f5:2e:1c:8a:d0:a7:91:9c:67:47:
                    29:00:a2:57:d7:c7:1d:07:f4:76:84:e7:cd:7e:d8:
                    48:e6:08:30:fc:64:c0:eb:67:26:83:e4:ef:c7:3a:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:53:5E:B8:52:D6:51:00:9D:AD:5E:BF:5E:BB:81:E5:1F:E9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a688be-f62b-3965-8269-f9ce789a3bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:74:96:44:9f:f5:20:6a:a7:ac:ee:4a:7e:38:a2:d8:be:08:
         67:27:63:f6:fa:eb:fd:1e:b8:9d:fa:12:a8:20:f5:18:aa:37:
         82:7c:ec:b8:94:69:89:c8:b7:80:ae:0a:83:d7:e8:29:7d:43:
         40:3c:95:e5:a2:87:78:9e:95:8b:7d:71:27:4b:51:6e:9e:0a:
         7a:44:dc:4d:0a:51:44:19:14:6e:e2:2f:0a:40:cf:d0:21:de:
         18:51:d4:42:ee:83:36:90:cd:47:0c:cb:6c:25:40:6d:1e:8b:
         b8:e6:9d:a4:1c:45:b1:aa:02:3e:d1:d7:43:78:8f:9c:01:76:
         31:2a:d1:9d:48:3d:84:46:29:b0:b6:d3:69:25:53:5a:33:e2:
         b2:47:e4:cf:b2:9d:ea:c8:65:3c:b4:ed:29:b3:20:b1:ea:e2:
         dc:e3:47:8a:ad:39:3e:36:8d:66:52:e7:0c:0b:0f:d5:d8:3f:
         2d:7f:d8:0e:b3:67:0c:c2:86:f8:b7:d9:57:48:13:3d:90:34:
         66:4c:46:d7:d0:f4:f2:9e:78:41:88:71:3c:b6:69:1b:24:7b:
         b6:0d:1d:ed:82:44:7d:95:f5:a0:b8:2e:0b:84:9f:e5:63:d5:
         1d:4b:2f:d1:87:be:41:b9:4e:68:aa:b3:ea:ad:e8:e1:be:26:
         77:21:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:48 2024 by rpki-client on console-ams.rpki-client.org