Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04c74b9-f817-382c-a23f-33b9c5a91a5f.roa
File:                     f04c74b9-f817-382c-a23f-33b9c5a91a5f.roa (raw, json)
Hash identifier:          3uj5kRBqETCM43WM1bDa1V2k1exSIns/iztrBV5Khvw=
Subject key identifier:   AB:43:6B:EB:60:0E:82:7F:75:D2:F4:3C:FE:43:92:65:3A:9E:83:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C106803EB0F5A59D38EE640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04c74b9-f817-382c-a23f-33b9c5a91a5f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.80.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:68:03:eb:0f:5a:59:d3:8e:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a724013a-d3be-45ac-8e67-d9e1139a872e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:18:a4:a9:6a:c5:66:c4:34:58:b9:66:15:
                    61:42:9b:a6:86:73:19:d1:e2:d8:05:36:9a:7b:dd:
                    a5:2b:a7:8a:62:53:48:4b:84:74:6d:6d:ee:97:99:
                    03:de:15:0f:ec:3a:69:14:87:20:45:a0:fd:a4:50:
                    7d:27:4b:1a:e7:d0:79:3f:39:86:95:f1:61:e8:0f:
                    67:cb:66:a5:58:8e:fb:dd:25:f2:bd:64:23:96:09:
                    fc:6b:9d:ec:b2:b5:18:8d:5f:75:35:8a:25:41:e9:
                    66:b4:60:68:a1:43:a6:44:43:82:47:12:c6:c4:79:
                    8e:ad:d9:8a:d4:a3:ba:28:d1:10:5e:51:5b:b2:d7:
                    37:dd:19:4c:38:fb:24:80:6d:b7:b2:82:3e:51:f7:
                    d7:4f:4e:a5:f4:c0:c3:ad:5f:b2:f0:86:69:ea:47:
                    25:6a:d7:c4:ce:27:7b:5d:02:f9:fc:c7:71:9e:4b:
                    45:fb:4d:6d:1c:89:47:c2:72:72:21:28:63:f1:b8:
                    3a:1b:d8:5b:5d:90:4b:a1:d3:71:aa:02:11:ee:5f:
                    f0:ec:08:58:1a:12:2b:d8:ef:d5:a9:84:bc:71:5d:
                    e4:ad:83:9f:c1:a5:d8:f8:c1:ff:14:45:af:d1:52:
                    91:8b:15:8d:1d:99:b0:0e:fc:d1:74:04:d9:ee:1b:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:6B:EB:60:0E:82:7F:75:D2:F4:3C:FE:43:92:65:3A:9E:83:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04c74b9-f817-382c-a23f-33b9c5a91a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.80.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:43:29:0d:a2:47:3b:44:57:6b:35:a2:78:c3:a7:3e:c1:e3:
         6a:7a:66:b2:89:78:6e:ce:41:66:cc:88:4d:0b:fe:cd:a1:af:
         e1:7d:d1:04:a0:eb:23:d6:45:13:06:d0:31:4b:9c:b8:51:89:
         55:80:8b:06:b4:a0:56:8d:49:84:82:8d:f6:db:5f:bf:df:81:
         64:e0:65:eb:4d:b0:c2:9d:ba:46:f2:5d:c1:17:78:db:73:d1:
         f7:e2:48:54:ff:ed:56:71:f9:0b:87:17:9a:a9:c1:7e:20:a8:
         cb:46:3d:08:f4:60:4b:2d:51:fb:58:75:af:5b:d6:4c:a9:e0:
         55:2c:dd:b5:13:6e:a9:05:a7:18:f3:5f:cd:85:a3:b4:b5:88:
         0c:41:eb:e5:dd:48:2f:6d:1d:1e:5f:9e:3b:a0:bf:d9:46:39:
         92:75:f7:21:dd:7b:3e:61:78:52:7b:c2:7f:c4:74:b3:c0:7c:
         51:ed:7c:45:0c:e0:16:7f:f9:b5:b7:9a:d0:0f:8c:db:cc:5a:
         82:aa:99:fc:98:88:51:b1:7b:b3:37:df:45:4b:7e:d0:42:09:
         7d:7f:31:e2:fc:ec:4f:74:ea:82:ff:1c:18:bd:f9:f2:84:81:
         37:c2:15:d7:f2:bf:9f:19:f0:4e:6a:07:05:85:50:34:56:02:
         9b:d0:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:21 2025 by rpki-client