Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa
File:                     ad309d07-bd66-35cc-a73b-df7e3523d956.roa (raw, json)
Hash identifier:          mkHvKg7i+y4lCFTITYtaDOWZ3VZfVmHfVSFk8mr24U0=
Subject key identifier:   35:8E:CE:F6:DC:28:9F:B7:B0:8F:46:4F:30:49:43:2C:1E:F1:C8:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D466FD0E8DB4D1086AD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.223.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:46:6f:d0:e8:db:4d:10:86:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=409da41d-a73b-4d7e-9344-0ff66402473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:55:b3:14:2e:05:36:8e:c5:6d:0f:8f:a6:
                    b1:00:c3:6b:4f:d1:cc:00:2d:93:c5:40:8a:38:ab:
                    8f:0f:8a:5f:60:09:f3:0d:ad:23:6b:fd:0a:5c:41:
                    bd:30:bf:51:01:cf:21:ba:11:58:81:95:2e:fe:a1:
                    71:61:8c:33:56:e9:eb:b7:21:a0:f8:34:05:7e:10:
                    ec:ad:3f:70:bd:4a:de:a8:f8:c9:a9:cd:11:a9:8f:
                    d7:5b:cc:31:ef:72:97:16:34:c9:1c:6a:49:60:0f:
                    5d:59:e7:2d:98:b2:3e:5f:66:6b:ad:d9:92:bf:0b:
                    8d:b0:0c:cb:e0:06:46:1d:1b:58:e1:7b:e8:4d:37:
                    02:5a:d1:d2:4b:aa:f4:62:74:a7:c0:9d:8e:c9:d5:
                    3c:80:c3:bd:70:77:ba:f9:b5:51:09:2d:96:97:c5:
                    ce:fb:ac:e3:33:07:40:02:c9:8b:45:fb:fc:7e:ca:
                    a1:35:d4:7a:4a:15:07:6d:fd:a6:4a:cf:57:c7:e0:
                    e4:b3:c5:c4:d7:68:b1:fc:c7:7a:6c:01:f9:a7:01:
                    7c:cd:db:bd:99:72:17:6c:a0:da:32:95:d5:d6:ef:
                    0c:80:fd:36:81:53:84:cb:21:f9:df:41:6c:f5:5a:
                    b5:ba:cf:e9:e1:f2:3e:26:77:62:5c:bb:e1:72:0d:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:CE:F6:DC:28:9F:B7:B0:8F:46:4F:30:49:43:2C:1E:F1:C8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:e8:d1:c5:76:57:f2:e1:05:b8:40:9a:9f:a7:ac:1e:55:
         61:9b:4c:12:cc:fa:a0:34:5a:74:68:70:5e:69:f6:ed:57:ae:
         f5:9a:57:ca:6b:c3:bb:d7:4c:da:6b:33:67:f5:bd:e2:d6:8c:
         94:6f:b6:57:f1:f8:40:b9:e5:a2:ae:ce:6c:e1:12:13:98:e0:
         ec:b2:55:7a:37:88:92:de:c0:ef:e9:05:d5:ea:2e:b9:15:22:
         b9:a7:ca:c9:0a:81:ae:29:3f:e4:4d:0f:36:d9:cf:2e:6a:1a:
         6b:14:4d:6b:61:e7:8c:61:9d:e3:ca:14:39:c5:ec:cd:84:6e:
         0d:fd:38:3c:aa:3d:70:0f:5a:83:29:0b:52:ed:a0:ec:06:f7:
         60:52:fe:0c:e8:c9:59:97:00:a9:04:73:88:d6:33:e3:eb:1b:
         10:81:e2:5b:b9:a6:78:bb:55:ea:9c:25:24:8d:d4:36:ad:93:
         80:bd:86:63:f6:83:31:d6:12:c0:f2:4e:62:20:af:42:cc:0c:
         37:1a:c3:ab:5f:39:a8:aa:56:1f:55:f8:cf:68:d3:fb:33:07:
         d2:b8:fd:00:91:be:9f:f8:bf:32:74:a7:5c:9d:41:96:d0:b2:
         e7:24:ab:34:bb:0b:95:c5:8f:07:68:37:fe:0f:92:6d:da:74:
         c2:97:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:32:18 2024 by rpki-client on console-fra.rpki-client.org