Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0b4bd85-859d-379e-b36d-37e69411b5c1.roa
File:                     f0b4bd85-859d-379e-b36d-37e69411b5c1.roa (raw, json)
Hash identifier:          PSCJVAgws4C7aFke34QfnVlalcjUPztmP3xphrgrQaQ=
Subject key identifier:   32:C9:E0:D4:2B:A8:07:A6:02:66:80:51:96:39:86:70:3D:7A:6E:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABEDA80F34A294A55C5EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0b4bd85-859d-379e-b36d-37e69411b5c1.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        71.195.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ed:a8:0f:34:a2:94:a5:5c:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e2452a95-f1da-49d6-a721-a57971407219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:4d:7e:19:17:93:ee:00:2e:8b:7a:b4:5c:
                    61:1a:fc:45:e9:c9:36:2a:45:fc:0e:7e:bc:93:65:
                    64:0b:30:31:bb:0d:43:da:47:3d:31:a6:70:a8:ca:
                    e7:56:3c:72:63:5c:cc:f5:c0:b3:c4:0c:7b:af:33:
                    25:7f:51:ad:bd:c9:fa:22:0d:13:af:ac:03:f5:0f:
                    17:64:eb:59:ad:da:fc:cf:20:11:de:c6:7f:01:22:
                    ca:fa:1e:f5:ec:db:46:c4:7c:a3:19:f1:17:44:d9:
                    8b:08:d7:ed:be:8a:93:15:c4:d9:09:6b:32:6c:9b:
                    74:a8:47:f3:c2:54:60:b8:9a:bb:22:db:31:f5:74:
                    a0:93:04:d4:85:94:26:66:c6:2d:c5:7f:4d:f9:9e:
                    d7:d4:7c:8c:67:53:5d:96:6c:fc:cc:d1:b6:96:43:
                    75:35:72:39:70:58:b8:ed:d9:5a:1d:2c:80:9b:47:
                    d7:29:bd:67:02:7b:a8:13:8d:32:a2:01:16:a0:7d:
                    98:7b:b4:79:50:d7:a5:16:c1:e6:50:d5:c3:6a:86:
                    79:91:ab:32:86:1d:cc:94:e8:4a:f1:99:67:82:05:
                    b9:d8:c4:18:a5:1d:bd:c2:ae:ac:4e:40:7e:b2:f5:
                    31:fc:f1:92:1a:44:c7:fa:43:ef:00:29:6b:e8:a4:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:E0:D4:2B:A8:07:A6:02:66:80:51:96:39:86:70:3D:7A:6E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0b4bd85-859d-379e-b36d-37e69411b5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:18:85:ea:25:0a:b6:d7:b3:52:59:45:e7:4d:d7:14:67:
         89:99:a4:77:fd:b3:99:1d:0a:78:86:a7:35:9c:3c:ea:ab:5a:
         01:3e:4a:08:eb:97:d3:19:86:cc:bc:3b:02:9a:6b:e3:61:da:
         ff:00:4e:a1:e2:de:2a:63:b1:c3:6a:6d:fd:50:64:bc:c3:63:
         ff:4e:ec:88:c8:0d:ab:e0:e6:a4:1e:db:e7:a7:ae:39:a9:82:
         d2:01:c1:e2:4e:bc:c0:e9:28:8f:3d:61:74:9b:9a:e4:74:61:
         55:47:0e:12:20:0c:72:00:31:91:f9:3f:ed:ee:4c:76:77:52:
         b3:6c:ef:b6:a6:bd:47:4f:15:0b:15:4a:bf:be:6e:84:53:a3:
         01:d8:5a:ba:67:ec:d7:f4:03:e0:08:c5:f8:2a:f9:cf:15:a7:
         93:e6:3d:5e:2a:1b:62:92:c8:49:6f:0f:66:bf:e2:c4:ad:1e:
         58:47:34:4b:20:5a:63:e2:3b:77:2e:39:0a:63:b7:38:09:4e:
         6f:7b:1f:80:70:2a:b5:b7:43:e9:22:c5:74:18:7a:0c:f0:5a:
         08:c5:44:5a:89:55:d6:f3:31:07:9c:a8:f3:7c:38:c3:da:c8:
         3f:e3:e3:af:b6:40:00:d4:18:42:04:3d:7e:36:7b:8d:c5:91:
         b4:df:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:59:49 2024 by rpki-client on console-ams.rpki-client.org