Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d0ff8e-0014-3876-ab9f-a88e2156c61f.roa
File:                     a7d0ff8e-0014-3876-ab9f-a88e2156c61f.roa (raw, json)
Hash identifier:          fxvp/4+ytMYiUrX018JdMSDATOSuDS23P6eHvNPFAEw=
Subject key identifier:   9D:40:48:33:0F:72:38:7C:67:3A:F0:8E:62:BD:9F:D3:4A:77:52:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FD9DA93C88522323B9A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d0ff8e-0014-3876-ab9f-a88e2156c61f.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.203.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:d9:da:93:c8:85:22:32:3b:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=1dbbb1ce-37a6-4c9d-949b-1ec5e6f0509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:e9:e1:ea:a0:ea:d5:1a:4c:9f:81:af:e5:
                    8c:24:9c:98:02:49:6d:e8:ae:f0:f2:48:08:77:90:
                    7e:25:4e:a6:b4:be:d0:d2:ce:ec:b3:57:36:8b:06:
                    be:a9:d6:a4:5b:cb:e0:c8:8c:28:ee:b0:f8:65:c6:
                    9e:7d:75:f3:f9:89:12:0d:7e:54:1a:65:c4:b7:96:
                    c5:10:5b:b3:33:cd:68:8c:05:35:46:a7:67:92:e1:
                    8c:27:08:0f:79:1f:cc:ad:dd:3d:67:96:1b:ab:55:
                    ba:3b:85:6b:87:ec:1d:73:88:2a:1e:59:ab:58:e2:
                    58:81:21:77:ce:e2:52:6e:88:10:f6:06:eb:77:62:
                    e4:69:06:0a:68:10:50:b2:59:56:59:9c:3c:ad:44:
                    1b:31:51:6f:7a:cf:32:72:b5:36:51:76:a8:ba:0a:
                    a8:1c:8e:67:9b:46:8d:fc:85:d5:4a:65:43:a0:c6:
                    f3:f4:47:d9:cb:95:fa:83:44:a6:60:90:5c:35:42:
                    c2:c5:20:a3:75:52:18:66:5d:b4:a5:85:1c:fb:b6:
                    ff:fa:91:af:1d:95:29:69:da:73:ce:2e:a2:13:f0:
                    6b:bb:55:14:9f:32:b2:96:24:63:77:aa:2e:a0:af:
                    6c:99:93:66:e3:c7:27:b2:79:0f:c0:f9:f6:e1:51:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:48:33:0F:72:38:7C:67:3A:F0:8E:62:BD:9F:D3:4A:77:52:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d0ff8e-0014-3876-ab9f-a88e2156c61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:6e:9a:e8:05:a1:61:e0:8d:b4:16:16:fd:ea:7c:6e:2a:
         cf:c9:62:ca:c3:57:ef:c3:5f:ee:76:cd:47:b5:9c:73:f4:fd:
         51:91:1b:7d:7b:84:50:01:f9:19:c9:71:a0:7f:83:e7:3b:f8:
         4d:af:3e:d1:fd:a5:34:58:9d:43:2e:d5:94:9b:20:4e:02:df:
         82:ab:fd:e1:ca:db:54:d1:ce:d5:ef:66:63:6f:11:88:7d:72:
         c9:01:f1:63:95:3a:d0:59:56:73:ab:14:9e:d6:cd:53:70:db:
         16:70:b0:e9:de:12:28:cc:36:8e:2c:65:1b:85:95:b5:47:8f:
         a2:e9:44:44:1e:ce:4b:c9:55:a7:1b:57:58:0d:4b:74:1f:92:
         10:f9:18:bd:d8:7c:bc:08:19:4a:e2:4a:8c:56:fc:84:58:ad:
         1c:a1:1c:f6:46:78:09:08:24:19:30:52:b7:3a:39:a7:66:4b:
         da:6e:3b:f5:10:a4:c3:6b:f9:e7:51:3e:ae:5a:58:a8:21:99:
         58:dd:e6:75:1d:ce:59:85:66:10:21:85:83:38:8e:ef:46:86:
         f4:79:10:03:21:e0:3e:09:d1:9a:c3:8c:db:df:1d:5c:f3:39:
         65:ce:ae:5c:5b:95:f7:e9:cb:03:a6:f9:0a:a2:59:53:8e:2a:
         55:8f:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:25:51 2024 by rpki-client on console-fra.rpki-client.org