Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7b6a4405-24d5-32b5-bfd1-c160051eb0c0.roa
File:                     7b6a4405-24d5-32b5-bfd1-c160051eb0c0.roa (raw, json)
Hash identifier:          fUn1WnXtq5BVOzECuJwgg+uuNr8ZG8v/CXLwGMwmrB8=
Subject key identifier:   95:DA:15:D1:D5:35:0C:65:89:53:16:79:5A:8B:2E:5A:F5:2E:58:1C
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584789EC01FED8D00EF1DAA994C0
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7b6a4405-24d5-32b5-bfd1-c160051eb0c0.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     12663
IP address blocks:        47.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:01:fe:d8:d0:0e:f1:da:a9:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f7d90bfb-bd2d-4741-a1f1-52ef84057c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:aa:de:d1:9e:cb:be:57:23:7a:00:f4:b4:
                    f4:7f:99:6a:56:c6:14:4e:fb:45:2b:b0:bf:55:c2:
                    fb:f3:50:e1:f1:e5:7c:d3:8c:1e:00:bf:d3:1c:d0:
                    ef:f2:ce:63:15:d5:cb:c5:6b:d0:8e:23:98:60:a8:
                    43:1e:05:11:a3:b1:3a:2a:37:02:dc:88:6a:c4:a9:
                    41:30:de:39:87:ab:ba:ad:13:c7:b4:bc:ba:9e:6f:
                    60:79:fd:9a:ca:dd:1f:a0:d4:d9:6c:87:d8:ac:ed:
                    52:54:bb:38:9f:f8:8a:a1:6d:aa:09:9c:0e:3f:fc:
                    21:02:cc:bf:d9:ce:09:16:bd:14:f6:fa:0c:57:dc:
                    62:9a:03:42:81:b7:d8:ae:36:59:de:24:1f:46:7d:
                    6c:68:e0:18:e7:5a:22:c0:d1:b6:08:9e:ab:db:d1:
                    28:1e:b9:ce:9a:12:a7:19:92:ec:8d:89:83:e1:81:
                    45:53:0f:50:86:51:7b:48:42:45:77:69:7d:7c:5b:
                    13:a4:fd:95:bc:44:7b:13:29:af:06:d1:36:ec:65:
                    6e:62:f8:34:5c:69:c1:05:3a:38:ca:b6:80:77:9d:
                    e3:c0:84:28:1c:8e:e2:0b:4c:fe:73:f1:d0:a7:25:
                    0d:9e:16:04:40:6c:9b:bf:0d:7c:eb:23:f0:ff:33:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:15:D1:D5:35:0C:65:89:53:16:79:5A:8B:2E:5A:F5:2E:58:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7b6a4405-24d5-32b5-bfd1-c160051eb0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f6:dd:01:5a:a9:29:7c:c1:7a:96:4f:8f:e6:ae:65:bb:9f:
         29:02:d8:c4:f9:08:d4:f0:05:80:dd:04:8d:cf:a1:c4:06:1a:
         a5:2d:e9:c6:b1:79:9d:03:60:da:ca:3c:73:25:19:7f:74:18:
         71:2f:07:e8:63:8f:01:8f:b5:8c:c3:4f:42:f3:7b:ef:7e:d3:
         b1:f5:9e:fc:97:3c:0a:4b:e7:77:ff:3d:87:91:76:cd:88:6e:
         57:c1:de:ae:5c:d3:11:aa:09:39:23:21:6c:ee:07:87:24:f3:
         fd:03:67:b5:24:b3:16:8d:81:ba:10:94:e9:b9:bf:70:a2:a2:
         d3:fe:48:36:73:1f:a8:d3:bb:f9:b1:40:35:7b:a9:82:8a:23:
         bf:af:14:09:e7:0f:97:06:8e:59:98:97:8e:0c:9b:16:17:d9:
         e3:7c:45:53:5b:99:fb:29:fe:32:21:39:13:5a:23:b9:76:79:
         2e:ba:ba:df:e3:1c:2e:b1:63:87:a1:99:98:6d:d1:d4:1c:63:
         e4:96:83:e0:bc:d3:4b:4b:fc:02:fd:db:8c:df:a2:e4:d0:e7:
         ae:b5:dc:26:3e:5c:ae:96:28:48:07:ff:66:cf:57:2e:d2:58:
         95:a6:11:61:24:58:81:ee:5f:5e:dc:e2:be:d9:43:98:ca:2f:
         a1:1b:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org