Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb6193-ed1b-3946-8e17-22dcf310154c.roa
File:                     68eb6193-ed1b-3946-8e17-22dcf310154c.roa (raw, json)
Hash identifier:          u/fQYaCzUavGuXPwCF7G2McEXkvM9K54PbxuTdkfGy0=
Subject key identifier:   CA:9B:00:5C:47:2D:E1:FF:15:AA:A5:EA:80:1F:E6:71:14:42:50:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C826417BFEAF7A5910CC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb6193-ed1b-3946-8e17-22dcf310154c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        73.6.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:26:41:7b:fe:af:7a:59:10:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6ff690e5-a1d9-4c26-93ef-e49059bf23f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:92:69:f8:3c:49:7a:26:9e:3d:5e:27:39:
                    55:25:ce:be:2f:bb:ac:9d:cf:64:61:ae:62:ab:ac:
                    8a:dc:c5:fb:0f:4e:4b:80:d9:37:d0:57:2a:6b:dd:
                    2e:37:62:fc:9e:42:27:be:e2:1e:56:48:76:6e:bf:
                    2f:91:6f:85:5d:91:a3:b9:54:e4:1b:1e:b4:8a:3a:
                    50:9e:5b:a6:47:55:c1:b8:e2:44:f9:ca:47:fe:ca:
                    6b:8f:c2:d9:87:5b:7e:30:6b:2d:38:b6:e5:63:3a:
                    24:e7:ae:fa:81:e0:a9:a9:cc:9b:c5:40:cc:ac:f1:
                    3b:29:df:47:4e:af:de:7c:c6:86:1a:82:d5:4e:c6:
                    5a:b7:76:49:83:f7:d3:70:42:0d:2b:cb:9b:92:0e:
                    46:1f:72:0b:87:3a:6b:1e:d7:8d:aa:46:45:17:bf:
                    8d:6c:56:2b:e9:11:09:e6:ee:4d:f1:96:66:d6:b2:
                    c7:25:32:b5:0a:8b:6d:a6:d1:4e:70:45:96:c4:31:
                    08:fb:9f:ee:bf:9e:28:da:5a:fd:09:65:6d:f7:bd:
                    ca:5d:d7:60:37:bf:69:5d:b3:22:bf:5f:bc:25:44:
                    be:70:26:00:ba:5d:1b:a4:45:1b:d6:af:66:13:ac:
                    e6:47:4e:85:ae:99:2b:e5:73:0e:10:ea:65:22:e2:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:00:5C:47:2D:E1:FF:15:AA:A5:EA:80:1F:E6:71:14:42:50:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb6193-ed1b-3946-8e17-22dcf310154c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:e3:ad:2c:6a:1e:2f:36:cb:ba:c3:46:ed:d2:71:e7:62:
         b0:c7:c1:08:70:ba:f7:44:6e:0f:ec:e3:14:41:85:e2:2f:bd:
         83:87:85:3d:75:7d:82:6d:fa:8b:58:7b:b4:f1:8d:f7:e3:bd:
         ed:01:54:e3:b3:cf:a9:d1:07:9f:55:41:8f:89:65:19:0d:1c:
         28:c3:31:d9:73:b6:1d:16:36:db:d1:fd:08:12:c1:51:57:f0:
         3a:ed:c8:7d:c3:11:e5:96:a8:58:a4:eb:03:58:0c:3f:0f:ea:
         4c:00:9c:cb:e1:cf:19:c9:12:08:8d:16:f7:5c:cf:ba:02:59:
         1c:99:ff:7c:ae:44:92:21:8d:17:43:e0:02:65:31:bd:e4:0c:
         6d:07:e4:4a:40:93:b6:ff:05:8c:10:c1:c6:c1:f4:ba:04:8e:
         a4:54:bb:4d:59:6e:6a:d5:6d:d9:71:b2:f9:89:4d:be:c4:55:
         bd:7f:7f:49:33:dd:bf:1b:e0:fe:b6:f6:a0:4b:a6:b0:0d:a7:
         55:74:10:3e:1e:e9:73:fb:46:19:af:e2:40:18:be:ec:1f:4e:
         56:19:02:85:ec:2a:be:24:8d:5c:3c:06:a8:2b:87:b6:9d:45:
         e3:95:c2:a5:57:c8:27:62:e9:cf:65:10:13:dc:a8:f8:67:d2:
         62:73:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:37:44 2024 by rpki-client on console-fra.rpki-client.org