Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048df027-d8b6-32b9-802f-a96091feb890.roa
File:                     048df027-d8b6-32b9-802f-a96091feb890.roa (raw, json)
Hash identifier:          8GHNx3jPtUeyTwdzytkKgWEUEPLjXknSyZ5o6+lauKE=
Subject key identifier:   38:C8:57:BC:9C:C5:43:D5:61:17:06:E6:31:75:8D:B3:96:3C:78:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7CC0EAC4B5082E2274C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048df027-d8b6-32b9-802f-a96091feb890.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.191.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:cc:0e:ac:4b:50:82:e2:27:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d261ec69-f3f7-4632-95fb-b88a1499a1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:2b:b5:8b:ce:df:8b:31:25:4c:57:cd:eb:
                    b0:e2:76:21:3c:71:2e:30:67:d7:df:a6:ef:76:e5:
                    85:ba:b9:64:4a:56:fc:b3:8d:59:3d:e8:52:89:5f:
                    23:c5:99:17:7d:1b:1f:d3:fe:4d:f2:41:e2:cd:d8:
                    ec:b7:da:b8:91:e8:66:d6:8a:97:5a:9f:23:bc:b5:
                    18:05:25:41:2d:61:39:68:28:f2:59:c8:3d:47:4a:
                    42:d0:88:0f:db:ab:c4:07:0b:21:e7:87:a0:ad:43:
                    20:e0:dd:e9:cd:73:72:c8:d1:c3:44:b0:f6:0e:85:
                    1f:93:5e:cc:24:23:6a:81:51:d7:86:08:e9:31:e1:
                    d2:db:ce:cd:3b:ec:1a:79:7a:3d:5e:96:94:ad:78:
                    20:e6:6d:a6:43:54:72:04:9b:92:6f:57:58:8a:8a:
                    01:1d:4d:9b:e0:d5:74:b6:49:74:57:bc:e9:5c:39:
                    5a:b6:0c:4a:17:58:4a:ec:92:4c:6b:45:f2:fc:7b:
                    64:0f:e5:dc:8f:26:c5:bf:d9:49:cc:da:80:af:eb:
                    2b:4b:59:50:81:3f:df:f3:1a:ea:40:6c:bd:1d:e6:
                    cb:6f:6d:a2:f0:73:0a:0b:18:ad:cf:e3:e9:4a:3a:
                    21:b3:f0:b1:34:92:09:46:02:17:09:50:84:ff:bc:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C8:57:BC:9C:C5:43:D5:61:17:06:E6:31:75:8D:B3:96:3C:78:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048df027-d8b6-32b9-802f-a96091feb890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:ed:a4:6a:a0:a6:01:62:3d:e3:25:36:aa:69:d9:ab:bb:
         46:8b:aa:8f:b4:77:30:0d:db:81:e7:fd:36:67:a1:c6:c9:2b:
         1e:d3:d0:8c:0b:b2:11:4a:18:8d:ce:7c:c0:69:35:d3:4f:ee:
         6e:a7:82:38:8a:a1:7b:1d:52:fb:ad:f1:b0:18:a3:bb:70:2b:
         dd:f1:d5:8a:25:0c:a2:64:01:c5:f1:62:e5:12:9e:44:d6:4e:
         8a:dc:80:0a:03:ce:97:57:05:76:65:23:ff:ca:53:ce:a8:09:
         74:12:c4:20:94:89:1e:b4:d5:3a:e8:60:40:3c:16:36:47:f6:
         66:49:38:1a:8b:0a:13:72:d7:bb:b9:64:19:dc:d3:e1:4d:f5:
         82:f2:ba:17:48:af:e2:55:54:46:dc:c9:86:99:49:11:91:0a:
         25:38:da:6b:c7:75:99:18:fe:cb:ef:8f:16:00:9c:7c:e9:7f:
         a5:f5:a9:22:bf:6c:a7:fe:5c:2a:d7:b5:30:c9:81:df:8b:f0:
         4c:d8:12:bc:c4:24:c3:35:02:59:22:39:c7:3f:0b:90:a9:d8:
         f2:ff:3a:18:18:4d:95:70:d2:01:92:c2:60:7a:0d:a5:5b:09:
         35:b6:df:b4:b1:0a:d6:a9:75:db:ab:a1:49:4a:e3:19:be:d8:
         d0:12:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:57:19 2024 by rpki-client on console-ams.rpki-client.org