Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa
File:                     a41dc1fc-d782-3496-b496-85c57b6abfa5.roa (raw, json)
Hash identifier:          aK/r4lBFuneqh4qiZuVPai/6YVi6vx6k3/3eIk35Hm8=
Subject key identifier:   47:7B:DE:18:97:6A:E0:2A:C7:48:D1:AD:91:BA:B1:A9:35:76:EC:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B09464A2012BB51901740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.219.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:09:46:4a:20:12:bb:51:90:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=d31a6eac-5ff8-4b3f-a5fe-9423622b479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:80:04:60:9f:e9:b0:30:74:f1:bf:9e:4e:
                    61:fd:c0:6a:e9:df:10:7e:40:01:33:aa:18:31:f9:
                    62:c0:24:42:7b:fe:c2:0d:4a:97:f3:f7:3d:eb:10:
                    9c:4d:7d:06:c8:79:37:a3:1f:87:6c:53:b2:44:72:
                    3b:b2:07:84:d7:79:a4:2f:c5:71:5f:34:43:80:40:
                    19:25:fa:77:d1:e8:53:5a:1a:23:64:72:7c:94:cc:
                    b4:e3:c2:9c:00:90:cf:c0:4a:e3:35:dc:71:0e:82:
                    f7:e6:fd:b5:58:8b:c2:b2:fb:25:53:7d:24:f7:77:
                    af:4d:a5:f2:4b:bf:68:b6:73:99:eb:4e:ad:41:3c:
                    eb:e9:1b:fe:ba:ef:b1:c6:e0:5b:c6:4c:00:53:6a:
                    66:b0:86:05:96:d2:71:99:92:40:23:ba:d8:c3:c9:
                    66:d1:bf:0e:d6:ab:3e:a2:ac:16:6f:cc:3f:8f:73:
                    a5:c9:2f:6c:c4:0b:17:5f:dd:f8:ba:a1:86:5f:4d:
                    b8:b7:e4:38:c0:45:07:1b:39:31:d5:34:62:c3:1e:
                    d7:26:90:c5:23:87:de:84:35:f2:bb:08:31:c1:da:
                    b2:a2:0a:2d:bb:f8:41:17:d5:3b:2a:56:bd:c5:13:
                    3d:12:08:9f:05:77:9a:b9:04:dd:a9:07:f0:87:fd:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:DE:18:97:6A:E0:2A:C7:48:D1:AD:91:BA:B1:A9:35:76:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:d6:52:13:6a:55:10:81:6d:34:92:64:02:79:9d:8c:55:
         12:f3:e2:b8:8b:7e:3d:fa:88:35:82:83:02:0c:1c:6f:9b:79:
         8a:cd:2e:41:04:fb:2f:f3:dd:a9:fd:1c:be:8e:87:4b:b6:e5:
         24:11:12:09:ee:ea:5a:7d:99:c2:16:94:ca:98:fd:97:18:71:
         b5:98:1b:30:15:7c:fa:47:9a:d9:db:d8:01:fa:4f:18:d3:db:
         a8:9f:4e:e7:5e:c7:26:68:13:91:13:fe:66:e3:36:be:ac:be:
         8a:93:36:28:4f:2f:b1:43:2f:98:6d:ac:5d:cf:51:7f:59:24:
         84:b5:cb:cb:dd:f9:41:c6:d1:71:4a:2e:fd:f2:d2:29:d2:fb:
         13:73:cd:02:db:31:3b:9d:b9:72:68:ec:7f:1f:34:e2:95:bd:
         a7:4e:2d:06:5c:b2:34:31:8b:e5:62:98:86:59:7c:6c:ed:d9:
         67:5e:5a:e1:fa:61:95:c2:e0:8d:78:bc:24:cc:7f:16:cf:00:
         67:5b:a9:67:4a:1e:e6:db:8b:06:1b:eb:d2:66:20:f8:a6:be:
         0b:e4:48:20:44:ed:e0:f8:e9:35:61:0f:7f:20:39:da:27:dd:
         79:9b:43:f2:dd:d2:30:68:d3:c9:03:25:38:0f:13:e2:a7:4d:
         e7:e6:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:57 2025 by rpki-client