Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b4f5348-140e-3437-a9db-be803b618865.roa
File:                     8b4f5348-140e-3437-a9db-be803b618865.roa (raw, json)
Hash identifier:          +m9C2Am9SzCRpp+6AXVEQ5g+laTn+RKpFAHDpltpxjA=
Subject key identifier:   C6:D3:F6:81:7A:C4:81:2E:14:7F:CC:D8:4A:07:93:92:F7:F0:D5:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C60FA3EBAD9EFA9AC5CE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b4f5348-140e-3437-a9db-be803b618865.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        73.157.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:0f:a3:eb:ad:9e:fa:9a:c5:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3efc97c5-9ce0-4962-b182-17849cff8bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:76:a0:cd:6f:eb:67:12:33:a2:ca:df:f2:
                    c9:5b:17:21:44:f8:d3:25:97:fa:71:f0:a9:a9:6f:
                    14:19:f7:89:05:3e:4a:02:1f:2d:93:a4:56:a8:b7:
                    86:86:da:33:47:b1:ab:51:2f:9a:14:80:95:8a:a4:
                    3b:73:f8:00:bc:12:b8:6d:d4:b9:4d:dd:14:f0:4f:
                    3a:81:74:9d:7b:76:30:b2:a4:19:0b:6a:84:13:64:
                    01:90:1f:ef:80:1b:82:74:2f:0c:4c:19:6f:2e:7b:
                    85:c0:16:02:b4:e4:8c:e7:a8:ce:8e:45:4e:95:42:
                    96:9c:98:45:c9:13:9d:8c:22:e6:b1:00:e4:24:88:
                    e2:59:61:62:e2:d2:03:bd:a6:12:f7:36:b4:10:ec:
                    08:52:50:c3:90:a8:10:01:bc:5d:a8:06:e3:07:2f:
                    bc:a0:bb:07:fb:62:a2:09:fe:0a:c2:16:84:e4:25:
                    c0:0f:58:13:be:3e:a1:74:04:e9:22:76:7b:53:2e:
                    c2:96:c4:dd:4e:51:0f:0d:a0:9d:d0:a2:06:55:1d:
                    63:8c:43:51:7b:bb:0d:80:89:75:d3:ab:6f:e3:d9:
                    b7:04:b1:9e:85:df:77:02:6b:8f:9c:82:86:b7:40:
                    f3:19:b7:1b:e0:ad:01:ac:f3:7d:b2:65:6c:0f:69:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:F6:81:7A:C4:81:2E:14:7F:CC:D8:4A:07:93:92:F7:F0:D5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b4f5348-140e-3437-a9db-be803b618865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.157.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:5c:89:6f:c4:84:86:ff:68:b0:7f:56:2a:d9:c0:7f:93:
         e3:f1:66:7d:7e:93:64:3b:08:c0:91:57:b6:90:f2:6d:96:3b:
         4f:84:a2:b0:6b:6c:52:e0:16:56:02:85:c9:b1:df:ef:bd:06:
         10:82:9d:60:59:3b:04:8f:12:db:94:d6:7e:d5:63:78:71:b4:
         ac:34:3f:c4:a6:37:54:2f:79:fa:d6:cb:47:cf:a0:95:d6:f1:
         52:c3:9e:88:d3:1a:35:d3:32:36:4a:0a:1b:e8:52:2c:75:76:
         27:9c:72:c1:11:7e:a8:d7:d1:a9:aa:97:cb:82:9e:a4:ec:e4:
         91:ad:64:bb:96:80:ea:20:f0:37:0f:47:17:33:11:9c:53:a3:
         52:d9:b4:74:66:7e:2f:b8:db:a0:1f:13:91:65:30:57:f8:0e:
         a7:6a:54:c6:26:a9:cc:99:60:0d:be:96:91:5f:e2:f9:5e:8f:
         f3:d0:6e:14:da:71:1f:01:37:93:e2:d0:35:ba:3e:71:ea:76:
         8b:e9:4a:5c:a5:5e:9a:42:de:a2:db:e8:21:4c:4e:da:4d:74:
         2f:40:96:2d:57:6d:ae:69:e4:bd:f3:06:21:48:8b:10:62:84:
         6b:c0:40:c5:25:31:91:b9:64:b6:2a:af:16:7a:aa:f2:72:19:
         2c:b2:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:29:41 2024 by rpki-client on console-fra.rpki-client.org