Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14e0ac2-5545-3889-9933-564eb4f9d9f0.roa
File:                     d14e0ac2-5545-3889-9933-564eb4f9d9f0.roa (raw, json)
Hash identifier:          77qDR3yDcYIYbhKPGtrQZy6HlIawPyMXFj8xphpc7X8=
Subject key identifier:   64:50:98:75:DB:41:E0:00:75:23:C7:65:58:D0:E4:1D:0A:17:7A:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E9B463797652716FE85C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14e0ac2-5545-3889-9933-564eb4f9d9f0.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.226.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:9b:46:37:97:65:27:16:fe:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ecda4cc0-9608-43a3-861e-1eb8bcbad612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:f0:fe:4a:97:07:02:ac:cc:95:de:fe:6b:
                    86:55:5a:70:3e:21:ea:33:3e:af:e6:1d:d9:b0:4e:
                    28:3b:c7:f9:29:e8:61:1c:da:67:bb:6c:a7:02:19:
                    93:f2:ec:ec:5a:cc:46:97:de:a6:02:4f:90:8e:9c:
                    a5:76:0b:d5:f8:b3:b7:04:d2:86:bd:8e:95:54:6e:
                    a1:db:5a:b5:3d:32:86:92:4d:ae:9c:7c:a1:dd:52:
                    dc:f8:d4:e5:97:53:aa:9f:38:a9:b9:cb:44:d9:1b:
                    bc:2e:2c:f2:b4:48:bb:42:ef:8c:f3:ee:45:00:40:
                    01:a2:4d:9b:ab:81:68:7c:19:7e:d2:c9:96:5c:e7:
                    11:d8:95:dd:83:56:f2:32:e8:97:de:11:c7:e2:6a:
                    0f:a7:13:c4:26:0e:61:04:9a:38:13:e2:3c:50:97:
                    cb:89:78:65:95:4b:ef:95:34:fb:15:f2:83:2f:d7:
                    a5:5f:40:71:7f:2e:65:1d:b6:ac:27:e4:25:a9:be:
                    ae:9c:f6:ec:dd:31:35:ff:80:f2:30:7b:f0:59:b0:
                    bb:3a:86:6e:9a:da:d7:63:da:7e:4b:5e:26:f3:6a:
                    df:fa:43:2d:47:3a:ca:4f:08:9b:aa:63:7d:ed:5e:
                    9e:17:c8:33:f7:d7:bf:d6:b5:63:6d:d1:ea:87:53:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:50:98:75:DB:41:E0:00:75:23:C7:65:58:D0:E4:1D:0A:17:7A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14e0ac2-5545-3889-9933-564eb4f9d9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:cc:cb:38:11:b2:1c:fb:35:44:dd:e3:ab:2a:30:c9:78:
         b6:b5:2b:b4:b7:9d:50:5d:1b:71:cc:72:39:63:e2:f5:60:70:
         af:d6:40:dd:c7:1e:59:40:3c:e9:23:12:29:67:f3:ae:de:79:
         92:05:08:fd:77:51:76:c7:a1:bc:49:6b:e3:dd:f7:25:7e:1d:
         69:cf:d7:b1:af:3a:5c:db:74:bf:99:c4:ea:68:67:7c:2f:eb:
         aa:7d:03:ea:3f:0a:79:04:e3:e2:da:5a:7f:0a:17:2b:6b:4a:
         34:c7:b1:f8:91:b0:fa:dc:15:06:71:2d:4b:1b:f3:e2:27:6b:
         d6:69:b8:02:11:71:78:78:d4:3a:9d:30:d5:5e:3e:f3:bf:73:
         7f:dd:e4:99:58:c9:8d:28:82:3f:55:ce:cc:25:eb:10:47:7f:
         6d:16:d6:aa:38:0e:5c:c4:01:7d:87:ca:17:f7:b5:89:9a:67:
         70:19:00:2e:10:19:21:b4:17:0b:64:eb:4e:39:43:68:f6:7c:
         47:03:7a:ff:ce:77:f0:5b:61:94:c1:bb:a9:45:b5:06:47:be:
         f6:05:cd:5f:d0:95:dc:51:72:be:b0:c5:f3:29:bb:20:26:60:
         b3:5b:23:6c:79:f9:f4:2d:02:02:a2:19:19:fe:bf:7b:f0:3f:
         3d:9b:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:21 2024 by rpki-client on console-fra.rpki-client.org