Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9d6d416-39e5-3fe3-87c6-f60b35f7898c.roa
File:                     c9d6d416-39e5-3fe3-87c6-f60b35f7898c.roa (raw, json)
Hash identifier:          PG9Swadd4VGim6u166ZTHdgW0hcwacIMrdS1NKqlSqk=
Subject key identifier:   7C:BD:B9:C8:C6:67:BA:26:00:EE:18:BA:76:24:8C:4B:00:A5:78:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEA90B0A815D8DFA2B6680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9d6d416-39e5-3fe3-87c6-f60b35f7898c.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33652
IP address blocks:        73.243.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:a9:0b:0a:81:5d:8d:fa:2b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=127684b5-558b-4760-b798-5b8393455953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:27:7d:10:fe:72:c2:a8:fa:76:d0:12:a5:
                    12:63:9d:d2:d0:36:8c:33:2f:9c:29:87:77:1c:0a:
                    35:d4:07:a4:57:3e:91:01:70:dc:60:82:50:0b:96:
                    2a:9e:dc:27:8b:87:2e:15:51:f0:5c:9e:fe:38:36:
                    c1:97:b4:f2:a4:68:61:5e:5f:be:d3:fa:eb:9f:65:
                    6a:3f:7f:0c:83:34:c5:1c:92:dd:a3:53:78:81:40:
                    c8:a4:25:14:a8:5c:19:8d:74:fe:b6:3f:73:fc:29:
                    d9:5e:f2:5a:34:99:60:e5:52:f4:71:04:54:7d:69:
                    03:20:cf:97:96:67:01:ff:33:7f:a3:36:9a:71:ee:
                    2a:93:b2:17:fa:e0:90:74:50:a7:39:0c:11:e0:a9:
                    b7:96:55:5d:db:15:96:5d:95:e7:ff:9e:f4:55:84:
                    c5:70:11:d3:ad:8e:b0:21:68:de:1b:a4:4d:d4:2a:
                    57:bb:99:43:cd:90:f6:e5:fc:3c:fe:65:02:cc:90:
                    88:3e:e1:43:f6:fb:28:d3:02:21:f8:4f:2f:3e:c4:
                    b6:76:1c:a0:54:2f:a4:cb:7e:c0:0f:68:81:b8:80:
                    9a:91:c2:59:72:19:97:19:5e:23:9e:cf:a3:f3:08:
                    f7:42:a1:43:98:0e:c9:c7:29:c2:8e:2d:1f:22:24:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:B9:C8:C6:67:BA:26:00:EE:18:BA:76:24:8C:4B:00:A5:78:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9d6d416-39e5-3fe3-87c6-f60b35f7898c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:ea:85:ed:f6:42:16:9a:61:49:1d:ce:c3:63:03:36:59:
         82:31:4b:89:2e:44:8c:09:db:15:74:35:d3:93:c9:ae:94:22:
         cc:1e:da:b9:f9:26:b5:12:32:f2:c4:2a:f3:61:55:e2:d4:1a:
         81:ab:10:58:37:53:83:af:46:73:2b:98:ff:4b:cf:f6:9e:87:
         2e:43:14:bd:22:5a:ef:ba:17:35:9f:3a:84:06:1f:2d:30:35:
         21:75:72:63:67:f2:85:f5:34:69:6d:b4:97:53:2c:46:d6:fa:
         ae:0f:f7:0b:24:87:9c:b0:88:cb:e8:2c:68:ed:d3:fc:9c:29:
         38:28:47:89:92:99:aa:4d:65:71:30:1c:06:af:3b:ae:a3:52:
         7a:41:28:ef:83:cf:bd:3f:42:dd:a3:e8:88:69:f1:03:f0:a8:
         e4:dd:63:8a:2f:43:45:ac:f2:9f:4f:a6:52:02:f8:c2:0b:93:
         06:e5:67:79:f8:c4:18:32:1a:61:c3:3e:af:e5:38:f8:c3:1e:
         36:8a:6c:f8:67:b9:36:e2:f7:d6:21:61:8b:72:26:46:72:ff:
         8d:07:2b:a9:1e:c1:c0:d7:45:cf:f8:82:96:32:c5:7f:28:ae:
         8b:81:a0:58:88:c6:ce:a0:41:35:3a:0a:69:95:4f:91:3e:51:
         b9:56:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:56:11 2024 by rpki-client on console-fra.rpki-client.org