Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac555256-3819-3be5-b24a-df1409e4cee8.roa
File:                     ac555256-3819-3be5-b24a-df1409e4cee8.roa (raw, json)
Hash identifier:          ovcgOvjFxHa6JdHoZvCffZCg6lK5pR9PtlRp/GjirIs=
Subject key identifier:   A8:C4:A3:26:58:C9:27:AD:9C:77:01:4D:99:D8:43:48:E1:0A:B0:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C61C7DEE9545E7D688CA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac555256-3819-3be5-b24a-df1409e4cee8.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        73.240.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:1c:7d:ee:95:45:e7:d6:88:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5a0944b4-84b3-4e5d-95f8-f2d542a6953f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:54:fb:a3:08:36:f8:42:20:0d:0d:f9:46:
                    9a:45:00:dc:b8:cd:97:db:89:4d:0d:72:06:2a:07:
                    65:74:56:0a:62:5c:a6:7f:4f:d0:91:bc:f4:cb:78:
                    1a:4e:15:ab:d0:33:51:49:7f:22:5c:05:92:a4:9a:
                    e0:1d:e0:b4:ce:8f:79:49:67:a5:0f:fd:5c:33:f6:
                    cf:4e:00:af:4b:b7:c2:5e:91:55:df:a5:58:ca:19:
                    bd:a5:34:f2:c7:a3:b9:88:8d:86:9c:d4:c3:15:bd:
                    fc:76:73:86:1a:fa:9b:b1:18:57:00:e6:75:f9:31:
                    65:eb:0d:d0:96:92:80:f3:2f:ad:51:e6:97:69:f3:
                    7d:f4:de:1a:62:6d:e9:0e:c0:b8:da:b2:7b:a4:ac:
                    3a:fa:30:92:1c:8a:7d:aa:55:9a:cf:2f:d6:0f:df:
                    6f:1b:3d:86:95:b4:56:62:a2:87:76:8c:a8:a5:27:
                    85:39:01:12:6d:29:e0:08:38:7c:f5:61:1e:6a:72:
                    e8:9b:1c:0d:3e:90:cc:6c:11:71:54:a3:1d:13:1b:
                    87:23:5c:47:9e:b2:2c:f0:a1:ff:c2:1e:67:b5:63:
                    d1:ab:93:65:1c:99:f5:9f:eb:25:ea:56:e6:4e:a9:
                    6e:d7:f2:c8:0b:26:45:6e:89:e1:ea:d8:83:43:67:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C4:A3:26:58:C9:27:AD:9C:77:01:4D:99:D8:43:48:E1:0A:B0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac555256-3819-3be5-b24a-df1409e4cee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:28:90:6b:37:d8:f1:06:72:45:92:94:73:0e:13:c4:52:
         9b:18:72:06:aa:57:e4:4c:78:7f:32:16:5a:69:25:71:6e:e9:
         73:49:bd:d9:e7:8f:1a:33:d9:bc:d1:51:68:25:a1:10:d6:1f:
         11:cb:e4:a9:84:f0:86:44:a3:42:94:19:0f:36:28:c9:48:a4:
         0f:f4:48:d9:f0:3f:0f:8e:ab:f4:c4:60:48:11:d6:c1:b1:6e:
         ff:4b:37:40:fd:20:dd:b0:82:05:6c:fd:6d:83:40:9c:dd:99:
         c9:0b:31:60:64:49:e2:c0:0f:03:bf:f1:47:e1:92:0b:45:f8:
         34:9f:ab:3b:7a:20:36:f9:53:6e:d5:17:6e:7b:1a:13:b8:62:
         9d:0e:a5:70:54:b0:67:28:21:b7:c6:46:97:82:1e:c2:1b:4f:
         7a:28:7f:81:0f:94:4c:b5:ef:15:1a:e1:36:92:ce:05:18:72:
         3e:be:26:08:7a:48:c6:c5:56:1c:c5:1a:b9:fe:00:26:98:c1:
         a6:ae:8c:b1:f2:61:d3:be:1b:f4:48:97:6b:5c:88:2b:1a:99:
         66:34:ab:90:7e:68:96:b9:3c:1c:56:9f:57:56:52:e8:26:05:
         32:d9:86:b5:ec:b7:4b:cb:7d:d3:24:92:86:a0:ab:5b:cc:6a:
         34:48:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:32:13 2024 by rpki-client on console-fra.rpki-client.org