Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaada8fa-47fd-366e-80c6-3793f11dca64.roa
File:                     aaada8fa-47fd-366e-80c6-3793f11dca64.roa (raw, json)
Hash identifier:          ioKkEDY92I34m7U9tSrd4Z7vP7bwfRGZ2S9lWDvEomA=
Subject key identifier:   6D:4C:0F:67:21:54:B5:63:6C:5E:E4:84:B6:57:B7:E3:46:FC:88:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C053312D2BE1FC28AE860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaada8fa-47fd-366e-80c6-3793f11dca64.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        73.24.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:05:33:12:d2:be:1f:c2:8a:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=8f59e770-56d5-4826-ad61-7ad0ca558cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:9f:96:c4:9a:63:d2:cd:e4:0d:a5:fe:e6:
                    b6:d4:6a:a5:41:d6:92:5d:ae:5a:65:e5:c0:85:db:
                    16:fa:a1:bb:ae:af:c1:63:43:2f:9b:b0:09:51:02:
                    a0:cd:30:26:bc:40:2f:1f:38:0f:ab:29:32:bd:51:
                    f8:27:8f:fd:a4:39:e9:bb:91:e1:ef:ad:55:93:97:
                    73:ec:25:cb:71:23:1e:c8:ea:3c:6f:eb:3e:94:59:
                    aa:15:ab:de:b3:14:e0:1f:73:6a:5d:bf:69:b3:9a:
                    d3:08:2d:0d:ac:d7:e7:6c:f2:c1:8b:42:c2:01:f8:
                    44:19:3e:67:ea:42:48:ed:77:1c:b2:1f:54:57:0c:
                    86:78:d3:46:c8:f0:91:f1:b5:a5:45:18:aa:00:8e:
                    0e:d2:de:25:4f:c8:ee:8a:8b:9e:c3:e0:d2:74:10:
                    a1:22:6b:83:f9:ec:d0:95:54:c3:c9:67:b9:74:8c:
                    64:60:c5:9b:f8:59:b9:46:34:38:64:ce:56:e1:87:
                    37:71:74:00:6a:fe:29:29:67:e8:b3:fd:9e:85:80:
                    5c:75:db:66:e7:5b:e0:8b:d5:75:26:e2:68:11:d8:
                    70:f7:64:49:2c:9e:a6:b7:88:79:4c:a5:6b:ac:0c:
                    26:02:7e:68:6d:39:69:6f:80:a7:61:a9:b2:8d:d1:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:0F:67:21:54:B5:63:6C:5E:E4:84:B6:57:B7:E3:46:FC:88:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaada8fa-47fd-366e-80c6-3793f11dca64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.24.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:56:96:9b:a5:3c:79:fc:04:87:2b:a8:58:12:d8:d1:69:9e:
         aa:af:00:4b:ae:e0:d5:c9:fc:55:bc:9c:eb:e5:85:a1:9b:09:
         49:56:1b:86:fe:08:a2:39:5a:56:03:c9:b6:eb:73:ca:11:90:
         84:59:1e:43:f5:ae:0c:19:88:b7:d5:84:b2:e0:b1:ec:af:bf:
         c9:8c:2c:d6:7e:78:38:03:48:96:f1:de:41:ea:a9:7b:aa:86:
         8e:3a:59:9c:db:e7:3d:4c:cb:7c:8c:25:10:0f:93:1f:90:47:
         82:3a:6d:ba:cc:5f:5b:84:ab:fd:54:b6:e6:28:68:ec:51:e5:
         a9:0e:b8:b4:4f:b8:36:1f:e4:4e:f6:0d:c2:ea:f7:45:6b:60:
         79:01:d0:da:91:a3:58:ab:28:24:6b:0c:fa:3d:f5:08:d4:d8:
         d0:0e:cc:bb:a1:9d:b0:87:db:57:90:c9:68:d7:92:58:15:ec:
         2c:74:1f:f5:4a:a0:72:7d:fd:b1:59:ab:47:ac:a8:db:af:b6:
         01:2b:a5:4b:28:3a:9a:fd:d3:70:79:cd:da:8d:01:0a:cf:ea:
         83:d5:d8:df:0e:ca:48:c4:1e:b2:b5:f2:4e:55:fa:c4:92:2c:
         79:ad:0b:34:b8:2a:b7:cd:64:1f:91:75:ea:15:cf:1f:87:2d:
         93:a2:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:06:24 2024 by rpki-client on console-ams.rpki-client.org