Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df259f7e-f988-389b-b20d-d0eb842f15f5.roa
File:                     df259f7e-f988-389b-b20d-d0eb842f15f5.roa (raw, json)
Hash identifier:          KnsNpoCiN6EZICpcVAR+s3cYCav73u3pgtpu+HiRqMg=
Subject key identifier:   50:E2:34:46:21:AD:52:05:08:96:A6:A5:0E:95:C6:5E:BD:87:67:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E07E8550FE171DDD31680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df259f7e-f988-389b-b20d-d0eb842f15f5.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.199.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:07:e8:55:0f:e1:71:dd:d3:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=021695fc-21e2-4fc1-8451-3f18f0559add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:55:00:30:2c:7c:30:db:df:d9:42:2c:78:
                    e2:2c:ae:95:63:41:52:60:2c:13:c9:49:b4:75:28:
                    52:2a:8f:ec:13:4b:80:d4:3e:ab:d2:d3:3e:5c:71:
                    da:1c:d3:b6:06:e2:93:ae:7e:70:26:43:42:cf:01:
                    d9:0b:5e:6e:31:a2:3f:18:95:01:65:96:90:9a:92:
                    cb:99:f9:73:fe:f2:ca:bf:5f:21:7f:33:f8:bd:6e:
                    f2:b8:27:44:35:02:ca:6f:66:33:86:a5:43:7d:18:
                    0f:03:aa:eb:bb:5c:3f:c7:52:fe:32:85:8c:cf:18:
                    46:d7:47:e8:7b:98:e4:9f:25:80:64:65:b2:bd:a5:
                    03:08:90:89:00:7e:29:b5:56:96:1a:d6:c0:cd:91:
                    a5:28:4d:73:93:1c:b8:a0:9e:ec:3b:6a:1b:22:7d:
                    ad:1b:09:78:1b:75:28:b6:c2:8f:3c:c1:cd:6a:df:
                    f1:f5:c2:52:96:95:e5:d6:67:14:a6:21:2f:d4:10:
                    eb:04:a8:80:85:b1:82:b9:05:17:5e:69:d2:f8:6d:
                    db:ad:fd:2a:fb:92:ac:52:a3:f4:b0:49:3a:77:4f:
                    a6:a6:a8:03:45:28:c6:e5:3e:4f:f5:8f:e6:9f:09:
                    c3:bb:4a:f7:bc:ed:3c:c7:43:f6:dc:1b:7e:f4:bc:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E2:34:46:21:AD:52:05:08:96:A6:A5:0E:95:C6:5E:BD:87:67:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df259f7e-f988-389b-b20d-d0eb842f15f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:bc:cd:f7:fa:79:e4:30:a4:f4:b7:a2:c3:aa:f9:43:24:
         af:e8:6f:33:2e:fa:bc:e0:c4:c3:4a:d2:35:d6:2c:65:4b:3d:
         0c:f0:f5:42:09:4e:0b:42:ba:7d:b7:90:06:3f:f4:8a:72:2c:
         bc:90:7f:f6:27:5b:12:02:7a:86:6a:f2:e7:9e:c2:7f:86:b2:
         f0:7f:1d:da:e4:4c:3d:0f:79:8d:c2:7a:b6:de:20:84:d1:45:
         6c:ad:d4:4a:d9:49:34:7d:08:d2:69:c4:b8:9a:0d:d3:e4:31:
         d1:3e:65:68:77:06:8b:0b:59:4c:c4:da:a6:d0:bd:c6:10:c9:
         6c:16:31:a7:91:62:c8:f7:79:67:8f:25:48:e8:39:90:f1:ab:
         58:8e:45:3e:f1:c1:f6:c0:47:51:1e:7c:87:9d:a9:29:03:42:
         47:7f:17:a9:76:35:25:d7:f2:96:0d:79:44:e7:90:b4:57:3b:
         90:86:f1:48:ca:e3:3b:d6:c7:29:bd:e6:80:ae:da:42:78:40:
         28:f4:a0:7a:40:0d:ef:87:c6:f1:ec:89:dc:14:eb:3c:20:8b:
         b8:1c:76:b4:28:2c:62:94:2e:6d:03:53:18:06:41:03:1f:2b:
         96:d7:c5:e6:8f:12:82:69:f9:9a:ba:cf:5b:bd:60:80:45:09:
         6d:16:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:36:29 2024 by rpki-client on console-fra.rpki-client.org