Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9302b1a-bddb-3feb-9184-9c39efb5ca21.roa
File:                     e9302b1a-bddb-3feb-9184-9c39efb5ca21.roa (raw, json)
Hash identifier:          23Zcb77KfKdkdLM557/YtdQvxS8ZycgzN59+lX3+WC8=
Subject key identifier:   62:5B:F2:65:6C:6C:33:A4:AB:00:85:03:D3:48:72:DB:D4:6B:B8:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6F354CC91BC6F870BF880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9302b1a-bddb-3feb-9184-9c39efb5ca21.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.238.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:f3:54:cc:91:bc:6f:87:0b:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a9cec6a4-13cd-443b-8dfc-c815e80a6ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:5d:0f:4a:a7:36:31:e5:18:fc:36:e8:48:
                    1e:04:27:f0:a0:99:4d:ff:6e:85:37:49:95:68:63:
                    23:9a:59:5d:90:75:ed:31:8e:ed:1c:6d:d2:12:f5:
                    5c:33:bb:f8:07:a4:39:25:a9:54:ad:dd:69:24:e8:
                    0f:14:bd:3c:37:91:ad:35:8e:a1:0e:90:98:56:da:
                    0a:a8:2c:1f:b2:2e:88:63:9e:29:03:c9:22:4f:54:
                    fe:83:4a:bc:a9:41:f9:ae:f5:ef:9d:8e:af:29:ec:
                    d9:6d:e1:a9:f1:5a:3b:1e:9e:bf:41:8b:7b:78:c3:
                    8b:1d:7c:b1:80:45:a6:e2:5a:3e:a0:ba:bc:5a:2f:
                    0d:b0:84:f1:15:6e:31:30:f2:70:eb:29:b8:b5:76:
                    d2:4d:65:e2:0f:3e:1b:e4:10:0c:13:3c:49:30:62:
                    60:25:c3:65:b8:94:9b:7f:77:6d:70:ea:c9:35:60:
                    a1:3b:3d:fd:99:23:11:b7:cf:0f:63:67:da:08:29:
                    61:64:08:dc:95:09:1a:9f:27:21:c5:81:04:80:e6:
                    6c:3d:26:85:ab:11:a2:ae:e1:da:66:ee:c5:01:59:
                    90:11:1a:a0:ee:b1:83:67:54:5a:d8:2c:9b:94:4a:
                    c8:5d:fd:7f:7a:38:a0:de:5e:50:0c:b2:59:9f:43:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5B:F2:65:6C:6C:33:A4:AB:00:85:03:D3:48:72:DB:D4:6B:B8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9302b1a-bddb-3feb-9184-9c39efb5ca21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c1:aa:75:12:08:70:88:d2:25:41:50:d6:54:5e:c6:4f:d8:
         b2:2a:1a:04:09:64:fe:0f:38:51:e3:95:f0:4d:e0:05:61:79:
         9b:18:ac:d4:89:38:54:d1:4c:15:b7:fd:42:e2:aa:66:ab:7c:
         09:61:52:f9:3e:2c:bc:95:3d:88:c2:35:63:6e:7d:cf:2a:3f:
         96:8a:ec:5c:ee:ec:fb:de:e8:fa:d5:79:b2:f1:eb:3d:61:1c:
         3e:11:d0:94:31:06:43:fe:e2:d9:dd:4f:29:d7:30:c0:66:74:
         77:e1:b3:e3:5e:38:34:20:6a:08:15:21:b6:57:fb:64:f6:30:
         76:1c:46:27:40:be:87:be:39:56:16:41:18:95:1d:86:f1:31:
         13:ec:74:fa:c0:32:1f:5c:8b:2d:6b:79:49:e5:17:e2:5c:da:
         22:d5:39:d4:fa:34:e7:ec:c0:81:84:7c:36:c3:56:47:3e:87:
         b5:1f:37:17:49:7e:d4:d7:29:39:f8:10:e9:3b:6c:4c:b1:73:
         7d:88:1b:62:47:1c:e3:cc:aa:cb:99:61:f3:84:7a:67:3e:38:
         f4:b3:ac:7c:5c:77:b1:24:59:9f:05:92:cb:2a:7f:ff:4b:f8:
         03:02:37:b3:2d:a7:11:ba:9c:82:12:a1:0d:c3:4c:03:e6:e4:
         76:65:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:37 2024 by rpki-client on console-ams.rpki-client.org