Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a163fd56-1ecf-3125-b210-5464512855eb.roa
File:                     a163fd56-1ecf-3125-b210-5464512855eb.roa (raw, json)
Hash identifier:          jMwPhLL7hKUo8TmMqSKfjbKVJKj1rdUxW2ZnMgY0Oso=
Subject key identifier:   8A:8F:E1:0D:37:B7:B8:F9:8A:BD:2F:80:DC:5B:2D:9C:58:F5:5E:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C86090707F88A2A782BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a163fd56-1ecf-3125-b210-5464512855eb.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.9.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:86:09:07:07:f8:8a:2a:78:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=3d53be0e-7b70-4edd-bd5c-eccf280f35ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:86:f7:f8:41:4e:53:9a:58:4f:cc:bd:d1:
                    fe:f4:02:99:d2:c6:83:15:5a:80:6a:e8:4d:f9:4a:
                    09:ad:0d:49:6e:f6:a8:6d:4e:23:ae:bc:87:94:ea:
                    e2:98:33:50:df:a7:e8:fa:42:c2:99:f0:31:09:e9:
                    d8:e7:14:3f:1c:e1:62:1f:71:a4:ff:8c:25:7c:69:
                    b1:8b:7a:89:84:7a:7d:4a:95:2c:5b:03:97:32:35:
                    7e:8d:e7:6c:b9:3e:79:ea:5d:44:8e:1c:b7:5b:80:
                    7f:73:a8:03:e9:68:40:d6:dc:c8:87:94:5c:d5:a4:
                    8b:fb:55:f5:3f:5d:2d:46:83:cc:d1:aa:2a:8f:86:
                    e0:70:10:65:f3:df:77:bb:09:a5:52:d8:ca:07:0f:
                    91:76:da:6f:76:96:c1:b3:1c:06:2c:9f:72:6a:5c:
                    32:ec:2b:1c:12:6e:df:ee:04:2d:b6:c0:b1:83:5e:
                    0e:1d:a8:87:cb:de:2b:5b:74:fd:93:98:bf:15:8a:
                    01:04:ba:7f:6a:d8:c3:2f:87:eb:d1:53:d6:48:1e:
                    0e:55:20:9a:4a:36:30:bc:d7:5e:57:46:9c:d6:16:
                    54:a6:77:e5:b6:eb:0a:70:91:64:de:4a:5d:3b:f0:
                    56:a7:b5:f1:3f:b3:b0:0a:e4:0d:40:41:7c:be:55:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8F:E1:0D:37:B7:B8:F9:8A:BD:2F:80:DC:5B:2D:9C:58:F5:5E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a163fd56-1ecf-3125-b210-5464512855eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.9.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:27:9b:c8:c5:80:f1:8d:6c:d5:68:a1:43:6e:74:8f:9d:51:
         76:6c:74:d9:86:7b:18:e5:02:90:38:16:42:70:dc:64:f8:ab:
         04:ec:61:4f:27:49:e2:65:9f:0f:36:a5:30:28:36:4a:4a:ee:
         4c:46:fc:32:60:fe:58:0a:a4:d2:09:23:95:7f:29:32:2f:20:
         23:3a:80:04:56:62:f8:be:95:88:c3:2c:29:74:b4:c6:b0:90:
         c1:98:94:e8:92:41:9a:d7:60:1b:3e:19:23:25:76:39:ef:b5:
         94:02:0b:7c:e7:9b:b7:fa:52:aa:80:4e:66:96:54:1a:8f:86:
         74:97:16:30:65:cb:e5:dd:ee:a3:a1:20:87:7d:9c:e5:1c:72:
         0a:b8:f5:71:ce:67:1f:b4:26:5d:1b:f4:f0:c7:6b:75:08:d3:
         be:12:3e:27:ce:6d:29:d7:4a:4e:40:4d:66:a1:a2:cd:93:da:
         76:58:68:20:c6:90:46:01:55:fe:07:31:5a:a6:c9:ee:0a:3a:
         64:5c:5c:15:a1:e0:78:8d:de:1d:f3:10:59:9f:77:1f:aa:23:
         8c:f8:4a:4d:b6:71:37:e1:8a:0a:71:51:66:91:be:52:c4:8b:
         13:27:2d:d8:6c:21:d0:23:a5:58:b1:66:64:47:56:e4:6c:51:
         35:02:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:24:43 2024 by rpki-client on console-fra.rpki-client.org