Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c16cc6-1ec6-3633-a5cc-7ad30c79b3d1.roa
File:                     d5c16cc6-1ec6-3633-a5cc-7ad30c79b3d1.roa (raw, json)
Hash identifier:          IXYlPYeogimarO/wQ7ofoact0R4HhOsfIo6QFxPDhFc=
Subject key identifier:   CE:B7:F1:3B:36:E6:3D:23:DA:EA:98:5E:CB:2F:14:B8:19:2D:B8:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB8FE5B12EE97B98057200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c16cc6-1ec6-3633-a5cc-7ad30c79b3d1.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        73.30.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:8f:e5:b1:2e:e9:7b:98:05:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=4f0366d8-1f88-4d0f-9939-f237c5485c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:9f:1e:5e:40:d1:ab:17:9a:4f:33:a8:95:
                    c0:2f:b0:11:48:39:68:26:e9:4c:6a:f1:14:4c:10:
                    a6:b1:6c:8c:b2:81:b5:69:b3:a3:33:30:1a:f8:22:
                    8f:23:2a:d6:5e:01:0f:35:54:27:d9:ea:de:9f:8e:
                    f7:9d:f6:ee:73:2e:29:ad:59:7a:cf:04:8a:e3:4f:
                    a7:02:9e:45:49:4d:df:7f:78:1d:40:81:47:57:5e:
                    2a:ce:b7:3c:8e:be:70:47:0c:a5:d3:cb:d5:e4:eb:
                    11:1c:c5:9f:5d:6f:80:36:e7:b1:c9:ac:d8:12:5e:
                    95:8f:ed:f7:9e:4d:8c:2f:cb:5c:ba:90:dc:c3:3f:
                    56:01:4b:9c:1d:77:94:20:63:da:7c:34:e4:cc:08:
                    cc:61:7f:e6:7d:4b:61:40:53:48:13:48:36:d5:4f:
                    b9:a7:98:ed:95:64:1d:9d:0a:16:6a:e2:15:86:e0:
                    aa:ee:6f:aa:89:db:51:a6:9e:60:93:af:ce:b2:2f:
                    ca:6d:63:d4:0f:a4:cd:f3:00:4a:ff:11:4d:de:16:
                    08:66:57:e2:e8:76:da:56:8a:2d:1e:09:86:31:b6:
                    e2:85:a2:4a:d6:33:81:4d:2f:73:f4:fc:c3:9a:d3:
                    e9:c6:c8:03:db:0a:5d:48:5f:57:38:75:13:f4:16:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:F1:3B:36:E6:3D:23:DA:EA:98:5E:CB:2F:14:B8:19:2D:B8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c16cc6-1ec6-3633-a5cc-7ad30c79b3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:02:9a:ee:40:c2:72:ce:08:40:90:6b:b7:17:43:89:bf:
         28:58:50:65:00:f4:66:24:62:31:64:9b:47:9e:dc:11:b2:a5:
         4b:c6:0e:ae:93:de:14:b3:4b:62:75:f3:4f:28:84:92:a9:f1:
         91:77:58:aa:42:80:02:a1:1e:12:bc:61:e4:5f:b8:55:7b:70:
         e0:12:3b:fb:da:f3:04:01:3d:be:8e:1e:0c:02:e2:c9:37:51:
         8d:26:b7:9a:99:73:71:27:64:e3:5c:d7:70:d3:ec:a0:c0:93:
         b5:19:af:95:00:22:3e:6c:58:99:07:09:97:75:60:1a:1b:ff:
         64:1d:53:2d:fd:a2:e8:64:a8:f8:96:4e:73:d7:01:39:c0:4a:
         ff:73:f6:f1:8e:ab:e6:ce:fe:c7:d8:18:f4:5b:02:e3:1f:ee:
         bc:f6:cf:12:c3:02:a2:6c:1b:6e:a0:44:e8:8f:2b:6d:63:00:
         52:1a:de:1a:cd:4b:dc:8d:ba:e1:d0:d0:70:79:22:f3:0d:02:
         87:99:ad:9b:72:96:82:37:e4:57:b8:e3:5a:21:a4:99:9c:16:
         3a:37:f9:5d:54:d8:bf:85:99:74:92:1a:fc:0b:3b:09:91:32:
         40:a9:2e:dd:5d:60:b5:d0:a2:21:13:bb:13:c1:03:ae:13:fe:
         98:d3:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:42 2024 by rpki-client on console-fra.rpki-client.org