Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d61c73a6-bc0a-3097-8373-8c014261199b.roa
File:                     d61c73a6-bc0a-3097-8373-8c014261199b.roa (raw, json)
Hash identifier:          vzxrODirZgmKTTu9VM4jZIzrkGWeLyDVYuaOQ/cwKgY=
Subject key identifier:   12:67:61:9F:71:D3:BC:B0:FA:69:68:04:B9:02:5D:53:E0:E6:5C:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C390E8D582878ABF4A190
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d61c73a6-bc0a-3097-8373-8c014261199b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.211.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:39:0e:8d:58:28:78:ab:f4:a1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=af7ae726-65b9-424f-a8db-3997cb55f74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:8c:2c:66:91:c6:81:31:5b:cf:79:35:e0:
                    82:48:48:e0:d6:f4:e6:da:9b:74:3c:62:8e:e7:c5:
                    30:9f:64:39:d0:d5:f0:8a:7d:9a:20:d7:71:5b:ff:
                    42:f1:0a:d9:91:56:51:00:9a:51:12:83:c0:16:32:
                    f6:a1:f9:48:6d:ec:a7:88:0e:c6:71:c9:ec:6b:be:
                    14:a7:d0:8d:8b:2c:4e:2c:d3:df:52:26:87:0c:72:
                    be:f2:ea:2f:32:89:9d:a4:77:44:9f:51:e9:3a:cb:
                    92:06:f7:22:db:be:c4:88:e8:20:df:2a:80:3f:db:
                    67:6f:fb:8f:a6:b2:10:28:42:4e:ef:22:43:0c:49:
                    94:d8:7e:d2:35:22:3f:c8:fb:01:41:61:cc:1b:08:
                    2e:52:98:6c:c8:bc:13:23:7f:46:e7:28:a8:1d:1f:
                    26:2a:f6:72:fa:d1:e4:7f:9f:74:48:10:a0:3a:1d:
                    74:4a:bb:8a:3a:c8:d7:d8:ef:ea:b4:b6:6a:c6:3c:
                    37:19:01:d3:d6:bb:18:9b:a9:0c:e3:3f:e3:cc:b8:
                    99:57:98:cb:be:63:61:16:c2:ef:ee:0b:ba:02:90:
                    76:c6:21:42:db:4c:d6:32:6e:bf:1f:f0:b6:29:64:
                    96:bf:ee:73:02:05:3c:a7:f9:a9:71:b1:f8:c4:5a:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:61:9F:71:D3:BC:B0:FA:69:68:04:B9:02:5D:53:E0:E6:5C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d61c73a6-bc0a-3097-8373-8c014261199b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:06:67:c0:4b:01:69:05:1b:15:af:f0:15:9d:62:e8:c3:46:
         21:6d:57:19:89:32:41:d8:33:dc:8e:bf:1e:9a:24:5f:b8:ad:
         47:3a:84:97:b6:96:fa:ca:0c:12:30:b5:ee:7b:a7:67:62:6d:
         44:c8:58:e0:f3:29:5b:3d:74:93:7e:e0:d3:e0:bb:fb:97:de:
         3c:d7:e0:2d:11:0a:04:f0:e1:06:ab:a4:02:48:7d:85:c8:ff:
         34:7a:4a:f7:4e:3f:04:ec:23:df:a5:52:f0:ec:ee:5a:75:be:
         78:d8:88:fb:21:05:d9:94:c5:05:75:1e:ad:02:66:dd:30:c4:
         0e:48:8a:54:78:c9:4c:cd:e2:dd:fb:38:5f:a8:a6:9a:f3:a7:
         d3:6d:9f:e7:76:a6:9c:1f:9a:a3:25:34:4d:9e:8d:f8:68:70:
         02:c1:e5:54:b7:d9:6c:0b:b2:df:cf:8f:3d:66:63:dd:3c:3b:
         e7:dd:91:10:59:9c:10:a5:29:d8:22:ec:12:84:8e:f4:31:9d:
         9c:5e:20:4c:9b:c9:37:a4:ef:f7:de:47:91:dc:05:cc:6e:cf:
         4b:cc:b9:94:52:f6:8e:f4:78:49:77:64:df:14:52:99:17:1b:
         6b:24:35:33:52:aa:04:83:f6:61:22:38:8f:11:7a:3e:bd:94:
         aa:fb:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:33:59 2024 by rpki-client on console-fra.rpki-client.org