Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fec53e2b-a95a-3678-8042-832feae132bf.roa
File:                     fec53e2b-a95a-3678-8042-832feae132bf.roa (raw, json)
Hash identifier:          j363RzLiV+3tPQQR95ihri5+CJpRjybnEF9s+WGEPJA=
Subject key identifier:   ED:D0:4A:20:58:77:EC:3F:6A:6A:54:00:55:48:96:6B:6D:62:7F:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C71F082AE1FA7EB93D3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fec53e2b-a95a-3678-8042-832feae132bf.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.68.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:1f:08:2a:e1:fa:7e:b9:3d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=48138b0b-7ac5-49fc-acdb-901a60f01805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:78:ee:32:4a:3a:c6:75:16:9f:0f:2e:5e:
                    e3:41:a7:e2:86:5a:73:78:ae:1a:6a:ab:b3:0e:93:
                    a0:a0:c7:8f:c9:e1:3b:be:81:d5:83:bc:77:b6:2c:
                    65:2f:8b:e8:5b:f7:0a:3e:b0:5e:24:f8:76:aa:17:
                    cc:96:72:12:10:13:eb:ef:d9:24:bb:ff:d5:5e:3f:
                    f3:5d:c2:8e:80:64:d2:f3:61:ea:e3:7a:af:02:6d:
                    42:69:74:12:98:70:10:28:4f:f1:ba:58:38:10:4d:
                    74:04:ae:ea:6e:65:00:50:ce:ed:82:1c:dd:61:11:
                    06:57:d4:70:8f:28:f2:49:e8:80:a0:1e:05:db:b6:
                    e2:02:2d:07:51:e7:e2:03:9c:79:3c:ed:c8:d1:45:
                    ae:f2:7b:44:eb:fa:04:d4:72:25:89:83:ec:a3:90:
                    69:13:c5:7f:41:14:ac:20:4c:0f:04:fb:96:b1:8a:
                    f1:05:6a:13:98:72:67:0e:3e:71:67:29:e3:eb:de:
                    e8:7d:7b:c2:6f:c0:12:9b:3d:7f:1a:48:e9:30:b9:
                    0d:f2:e0:93:16:4e:46:d3:f0:74:90:ed:1d:44:58:
                    9e:0d:99:28:6d:2e:19:61:5d:10:41:22:ab:6e:4b:
                    e7:94:8f:7e:1f:09:77:43:e7:98:b4:51:8b:e5:68:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:4A:20:58:77:EC:3F:6A:6A:54:00:55:48:96:6B:6D:62:7F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fec53e2b-a95a-3678-8042-832feae132bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:12:db:a4:41:2f:5a:15:f5:8f:28:c4:37:f3:4b:94:3a:
         c4:4d:9c:ed:41:d3:d4:30:e9:5c:c5:34:52:a9:cf:e8:79:b3:
         1d:ed:58:6d:10:b0:5b:c0:97:e8:0b:bc:96:b5:ed:4b:4e:42:
         d5:c8:4f:0e:50:33:1d:78:ff:cd:a2:bb:0f:9d:0c:56:72:63:
         1e:71:0f:d9:5f:10:5f:41:e3:16:c8:46:f8:cb:e9:8d:d2:38:
         36:47:4d:de:99:26:6b:9e:f5:e3:f8:f4:4b:4d:4a:ca:33:6e:
         10:b6:27:5e:11:19:92:15:76:bc:80:20:16:8a:fb:54:d6:9c:
         83:ca:9a:23:ee:17:18:48:b5:4e:2f:c4:30:d8:b8:41:89:db:
         c5:22:a3:d6:62:b8:b2:cd:24:26:71:ae:e6:dd:13:a4:f5:ae:
         3b:3e:64:3d:4d:f2:45:da:6d:8d:4c:ee:61:6e:da:17:bd:a4:
         65:4a:c3:a4:74:e4:cd:1a:d3:9f:09:ee:19:39:fa:c4:b5:d4:
         51:48:1f:6d:76:be:04:74:30:bc:31:c8:fa:1b:e3:82:64:49:
         a2:74:84:db:ac:6b:67:25:44:0d:9a:b0:7f:66:c2:21:a7:e3:
         4b:c9:ab:be:88:17:fc:76:80:6f:4b:64:d0:13:0e:8f:a2:0e:
         f6:64:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:14:58 2024 by rpki-client on console-ams.rpki-client.org