Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54b88b1-6c30-39f4-b817-c7094162e754.roa
File:                     d54b88b1-6c30-39f4-b817-c7094162e754.roa (raw, json)
Hash identifier:          /VGBVHhnE8uNK9Q1KAzOYYgVgQGDOqLb5cC1KpaIt+Y=
Subject key identifier:   65:8B:6D:41:CA:0A:79:D0:F9:A8:15:73:FB:D3:AE:E7:52:00:B3:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6F3A73921384F16871200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54b88b1-6c30-39f4-b817-c7094162e754.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.238.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:f3:a7:39:21:38:4f:16:87:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=83862b60-fc05-49f5-b495-cfb93f621c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:1f:00:ad:25:7a:ba:3c:7c:64:16:6d:04:
                    2f:9b:f0:9e:eb:f3:7a:20:0c:bd:e8:39:e7:69:29:
                    6c:2d:b1:b9:34:7f:de:1f:bf:74:e7:c1:00:c6:b0:
                    8c:ea:f3:df:7c:f6:16:ef:97:0d:c5:c3:26:1e:01:
                    0a:66:2f:d9:d9:ef:5a:74:f1:cf:74:4c:d3:31:61:
                    86:1c:ac:52:4c:c2:ab:0b:3e:1d:21:4b:13:e0:32:
                    76:96:4a:e0:55:bb:a5:4a:e5:47:b3:28:95:1c:79:
                    cc:94:3e:35:b2:49:47:06:a3:c3:1e:2b:10:5d:4c:
                    d7:bc:09:9a:7d:2c:35:eb:90:85:a8:fc:51:31:bd:
                    47:36:1d:4f:23:a3:78:10:a0:5d:cc:ac:11:c2:0d:
                    cd:0c:82:96:97:68:32:1e:3e:de:b5:f4:d8:75:57:
                    d6:1a:89:8c:a9:e9:91:03:5e:cd:f5:fd:bb:24:56:
                    3a:93:ea:76:c8:e8:d7:d3:a9:98:ce:2f:f0:f1:f8:
                    67:20:64:25:b0:29:64:84:cd:c0:ff:69:cc:04:79:
                    2e:48:3a:c8:e4:f3:7b:25:bb:88:cd:70:40:28:3f:
                    ab:2f:6c:b2:f6:5a:55:02:87:19:fb:98:c7:f5:6c:
                    b1:51:ce:79:ca:bd:8f:5e:5d:55:09:7f:12:d3:9f:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:6D:41:CA:0A:79:D0:F9:A8:15:73:FB:D3:AE:E7:52:00:B3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54b88b1-6c30-39f4-b817-c7094162e754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:38:59:04:5f:a3:ac:27:eb:8d:1c:17:5a:cc:ff:a8:10:fa:
         a3:6f:44:ff:45:1d:57:7c:55:3e:ee:4c:f5:ce:a6:19:fa:22:
         24:5c:40:09:dc:c4:e3:7f:01:c2:55:79:b9:4a:a9:af:42:9b:
         34:b0:46:a8:31:4b:31:59:aa:2c:42:8f:54:21:ed:cb:4b:fc:
         02:d9:00:33:8b:36:15:09:7d:e1:60:fb:63:75:8b:6d:da:63:
         ba:f2:15:23:80:26:43:b7:22:3e:7d:70:8d:1f:93:e6:a2:19:
         37:f3:72:f2:37:5f:5a:7b:8f:f8:bc:8c:70:9b:a1:bd:e4:41:
         6b:74:d2:fc:d5:37:5b:83:2a:59:2c:7e:ae:6b:51:91:01:82:
         0f:72:85:27:d9:72:95:4a:a7:b1:40:ea:c4:f1:9a:7a:3e:7b:
         24:34:5c:b3:c4:7a:04:ab:54:3d:8e:85:ab:2d:1a:d2:0b:62:
         aa:5e:e7:79:9d:49:72:0f:6d:f4:1d:d8:df:a8:dc:f7:7a:51:
         60:d4:c6:f8:1f:cf:f6:90:bf:33:04:ee:62:fe:6b:72:12:5e:
         d8:9c:23:d7:9c:46:64:99:34:13:99:99:04:29:68:bf:13:08:
         ec:eb:e2:7b:9a:22:96:7c:d5:2a:fa:0c:5e:b2:f5:08:e6:77:
         35:e1:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:50 2024 by rpki-client on console-ams.rpki-client.org