Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da036e5d-783a-3ad4-9be0-338b8ae4d225.roa
File:                     da036e5d-783a-3ad4-9be0-338b8ae4d225.roa (raw, json)
Hash identifier:          WaTmFZsC+8NVXYolpFFWb3zUIlGoMJryzjNzhjGRMsM=
Subject key identifier:   01:EF:A7:CB:F2:C8:25:FF:3A:13:3B:4A:84:BC:69:E1:60:7A:4C:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A667071D53047DD75C3E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da036e5d-783a-3ad4-9be0-338b8ae4d225.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        75.73.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:66:70:71:d5:30:47:dd:75:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=a3e3735a-48d5-45f1-b815-44eb6561bce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:93:73:e2:7b:9f:50:61:60:1a:50:3d:f7:
                    51:27:26:6f:58:b0:dd:aa:fa:9f:e3:c8:dc:c7:77:
                    2d:62:d4:b5:75:d8:d1:41:7b:d1:cd:7a:17:ae:16:
                    a7:52:f7:23:57:86:17:00:92:95:40:92:13:2a:c5:
                    9d:81:6d:3f:4f:0a:bf:a0:0b:67:cc:1d:5d:f8:d0:
                    47:b8:48:33:77:4d:c8:56:6b:3c:9c:fe:f1:c5:85:
                    ee:08:99:9b:fb:b9:e8:7d:04:fb:fa:e5:c7:3e:4b:
                    44:31:e4:5b:dc:cb:8c:dd:3a:a5:fb:f2:ea:54:d2:
                    21:2c:b1:c4:fc:4f:c0:08:13:2e:2f:b3:93:d6:b3:
                    b6:63:e5:71:53:8e:f3:15:01:f3:bd:e2:df:74:7c:
                    55:9b:94:da:72:fc:28:f0:ce:ed:23:84:18:4c:0e:
                    77:38:1c:8e:3a:86:bb:d1:ea:2c:30:b3:bc:c5:28:
                    d3:dd:75:c4:6e:10:bf:64:3e:d8:e5:c4:86:a7:da:
                    c5:1a:f3:66:ec:91:c5:1d:4e:17:ab:dc:70:83:98:
                    fd:15:2b:a9:b5:3f:f8:df:8c:b7:16:ca:c0:28:16:
                    67:79:b6:04:dc:92:4d:67:ea:60:0a:5c:6a:a8:3b:
                    b3:43:e1:b5:b0:61:a3:28:33:90:4b:40:92:c5:a9:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EF:A7:CB:F2:C8:25:FF:3A:13:3B:4A:84:BC:69:E1:60:7A:4C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da036e5d-783a-3ad4-9be0-338b8ae4d225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.73.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:21:ca:64:7c:74:f1:89:87:32:c1:30:68:19:24:2f:74:38:
         19:86:a8:8c:c8:0b:3c:84:cc:4a:2d:fb:10:b6:22:cd:06:72:
         75:09:b7:26:5e:ef:c8:85:a9:d8:5e:41:0a:24:d5:01:52:13:
         07:bb:f5:5b:f0:39:ca:13:a1:ea:13:95:cd:b6:78:0d:22:29:
         2a:68:a8:8c:fc:13:b6:bf:02:3e:a0:e0:c5:a6:07:5e:dd:27:
         1e:f8:ac:c8:89:69:93:eb:a8:6d:df:25:14:27:6c:ff:f3:11:
         75:85:4d:82:0f:ae:d7:5a:ec:70:4e:3b:f4:77:dc:81:d5:f3:
         92:9b:08:03:d6:40:e8:a9:fa:ed:8c:95:3f:bd:ed:2d:59:47:
         8b:3a:e9:1c:4a:4e:7e:d6:7f:f4:ae:83:da:6c:c1:df:98:35:
         f0:34:2e:7b:78:14:62:34:32:db:8b:27:c5:8c:79:3a:bd:54:
         9c:08:47:17:0f:ce:30:53:40:91:85:24:00:20:61:66:5d:fd:
         a7:8c:a6:99:77:ef:57:a7:a8:8c:f2:c6:ad:0f:72:aa:c0:73:
         a8:90:ef:a9:12:83:46:90:0b:3b:f2:72:c2:b7:c8:5c:c3:77:
         27:20:25:3f:35:fc:c3:bc:4d:c3:88:77:b8:69:4c:96:31:2c:
         4b:2e:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:41 2024 by rpki-client on console-ams.rpki-client.org