Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
File:                     36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa (raw, json)
Hash identifier:          Y00k8w05Gbey0KlR+9XpA9A6W5FLlQwRlJzYovKbs68=
Subject key identifier:   AE:6A:45:84:EA:E2:34:CE:7F:BB:E3:D3:CD:83:92:0F:FB:4C:AE:05
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285845734DAA3CC2E1675EED30E300
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     55002
IP address blocks:        166.73.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:aa:3c:c2:e1:67:5e:ed:30:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=0f1e1e2a-003b-4a64-91a6-57be8695f938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:2a:2b:4d:cc:64:8d:9b:71:17:92:c8:53:
                    60:54:04:5b:4f:44:7b:22:ef:f7:73:c8:ff:14:0f:
                    67:e2:1e:19:d5:9f:9f:85:b6:16:bd:f1:1b:4d:3f:
                    3b:c3:2d:ab:83:13:e7:f9:48:a9:df:1f:b6:ff:f7:
                    4c:27:db:7a:c5:77:eb:66:0a:69:68:71:ee:02:15:
                    fe:0e:f1:bb:1b:69:1f:9d:48:ab:23:3e:c0:4e:08:
                    17:d4:a5:4d:71:e5:c9:38:17:a4:ef:36:33:9f:dc:
                    08:c3:cc:20:f2:dd:2e:e2:20:65:52:7d:cb:ef:50:
                    2f:68:82:6b:94:38:0a:c9:2a:13:eb:8d:ca:2b:50:
                    e0:d0:7d:b2:c9:03:91:69:67:49:d0:db:27:29:42:
                    9d:9a:d2:76:d3:3f:c7:1b:c4:09:ba:3a:d8:95:4d:
                    b3:dc:09:69:68:88:ae:ec:3a:36:d1:98:ee:5b:66:
                    1f:cd:a1:c6:b5:14:10:fc:5a:49:cd:8c:3c:83:fa:
                    0b:cb:e3:e7:a6:a0:ba:73:b2:31:71:d2:6d:76:a0:
                    7b:52:46:72:98:3b:22:3f:cc:b4:86:86:a3:2a:a5:
                    36:e1:99:c4:f0:42:5c:25:f9:8b:4d:1a:75:2b:ea:
                    fc:d7:16:4b:a2:4b:a2:d3:78:f2:48:dd:95:d8:ab:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:45:84:EA:E2:34:CE:7F:BB:E3:D3:CD:83:92:0F:FB:4C:AE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.73.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:5f:48:b5:b6:39:df:88:5f:78:d2:c7:4b:f6:57:7e:ae:
         e6:b0:dd:51:0b:fa:5e:53:8a:2e:11:98:34:14:b2:ae:60:59:
         d5:54:45:19:44:da:0e:ce:43:c9:d8:1d:66:0d:14:30:5a:56:
         16:62:6c:cb:9c:06:0b:13:8d:1b:5a:92:ba:3c:22:9d:af:60:
         bf:7c:14:34:95:10:c2:70:c6:24:25:3d:58:be:b9:e6:38:a5:
         ae:c3:68:69:89:70:6b:7f:95:aa:10:10:24:37:3f:91:cd:b2:
         0d:6b:d8:a3:74:61:ca:98:91:4a:63:f9:3a:95:79:61:c7:74:
         c1:39:a6:06:80:da:71:e7:ac:6c:ae:99:00:2b:38:cc:0e:a3:
         83:1c:72:2e:b0:39:36:43:dd:08:ac:95:c7:81:c7:7a:e4:a3:
         2f:8e:94:4c:a8:a0:40:2d:3f:43:87:ba:01:f9:21:a2:9a:db:
         30:ee:64:79:85:32:a2:65:a0:d2:48:b1:2f:74:2f:af:3f:14:
         66:53:96:e2:fe:3b:5b:b5:71:24:ca:e5:1a:85:b4:af:42:1a:
         53:e2:db:bd:82:96:58:0f:6a:af:43:c2:75:df:33:8f:36:62:
         4d:c4:dd:33:a7:28:b6:dc:55:c0:62:48:9f:18:dc:d1:77:62:
         c8:86:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 07:31:40 2024 by rpki-client on console-fra.rpki-client.org