Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
File:                     cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json)
Hash identifier:          le44ZfH3CmTbzkCoi9KzFqTpH14et7B0T6KASalWrEw=
Subject key identifier:   61:D4:0C:B2:EE:6C:03:B9:7C:C0:BE:34:A8:CB:64:91:A2:4C:D3:4C
Certificate issuer:       /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial:       010D0C9F43285847BCEE413358A28714E3B00600
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
Signing time:             Fri 01 Nov 2024 19:31:58 +0000
ROA not before:           Fri 01 Nov 2024 19:31:58 +0000
ROA not after:            Thu 30 Jan 2025 20:31:58 +0000
asID:                     14362
IP address blocks:        199.33.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:ee:41:33:58:a2:87:14:e3:b0:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
        Validity
            Not Before: Nov  1 19:31:58 2024 GMT
            Not After : Jan 30 20:31:58 2025 GMT
        Subject: CN=3db3b707-f375-4494-bbe8-2db967fb52c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:70:61:0e:40:6c:16:fe:48:61:fc:fe:a2:
                    a3:b4:b7:55:ff:80:c3:da:4d:68:ac:55:c0:59:00:
                    a4:62:33:e0:44:ba:5e:b3:e3:97:0b:19:de:05:a8:
                    cd:b4:eb:5f:63:1d:22:7a:c7:a3:9b:00:47:6f:85:
                    1e:e1:c9:56:55:76:1d:b6:53:78:f5:45:04:9c:a2:
                    10:be:b7:18:52:60:da:d4:b1:6e:4e:d9:59:33:3d:
                    59:a9:6f:9a:4f:f6:f6:9e:57:ea:46:83:e0:be:30:
                    00:9d:28:7d:f4:21:ef:87:16:78:8d:fb:0c:e3:0f:
                    1d:1d:3d:f6:16:9d:d2:e6:61:25:fc:36:ca:b3:5b:
                    05:aa:9a:80:89:75:7d:0f:cc:d0:fb:71:c0:14:84:
                    79:41:c6:f6:0b:e6:74:62:46:0b:fa:c0:b4:4f:1d:
                    47:81:b4:69:21:15:e6:2e:ef:2c:aa:22:61:a7:c7:
                    6f:3f:5a:49:06:05:92:da:f8:26:4e:17:f9:b8:b9:
                    af:0d:ad:65:4a:f2:3f:b3:81:a5:35:9c:35:8a:fd:
                    d6:9b:a5:c9:d2:28:19:26:83:3b:45:77:7d:84:29:
                    b4:19:10:19:b8:db:04:ea:d3:c2:1a:89:e4:8b:5c:
                    0b:94:e4:51:35:9b:c6:84:d9:66:89:05:52:85:d9:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:0C:B2:EE:6C:03:B9:7C:C0:BE:34:A8:CB:64:91:A2:4C:D3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl

            X509v3 Authority Key Identifier:
                keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:05:09:d1:b3:dd:77:65:9b:e3:7a:3f:d7:ea:f5:18:27:
         cc:75:f4:28:0d:40:97:99:16:c2:28:5e:ae:80:f7:5f:94:2b:
         c2:5c:84:37:6a:db:1c:94:6d:b4:dc:c2:a0:6e:39:3c:d0:c9:
         f0:42:1c:7d:69:b4:3a:74:3b:95:d3:2c:26:4e:a1:a7:ae:7c:
         69:e6:8c:e7:e7:bb:e4:ac:7f:26:ad:f5:0a:08:b9:35:db:dc:
         6b:ae:eb:9a:e6:c4:af:74:c0:f2:c8:8a:bc:92:f1:b0:49:bf:
         2c:d0:c1:3f:84:9f:d1:85:ba:14:df:2d:17:1a:60:38:98:ae:
         f0:ea:44:ba:f4:c2:13:46:e1:a3:a5:a5:94:82:57:8f:61:5d:
         6a:32:65:92:02:4a:4c:1f:8b:79:5f:9f:ca:38:09:a7:d6:29:
         93:f3:75:a8:2f:bf:30:bb:aa:50:c9:c5:f7:83:ff:d1:d0:9e:
         9c:c9:e3:05:50:88:67:52:71:44:9b:fd:e8:d0:e4:6c:a0:73:
         25:dd:24:a2:ac:b5:2d:00:11:e4:66:93:a7:a0:ff:d4:70:49:
         91:4b:28:fa:67:c5:b4:82:53:38:b5:06:61:37:3d:be:43:ff:
         cf:b3:96:23:f3:6d:3c:4a:37:9a:b7:0f:91:c4:51:a9:bb:57:
         73:3f:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:15 2024 by rpki-client on console-fra.rpki-client.org