Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b98ac31-9b12-344f-bd95-ec1e041d743d.roa
File:                     0b98ac31-9b12-344f-bd95-ec1e041d743d.roa (raw, json)
Hash identifier:          OTmFVbJgW57+Exz4OAh2bPoNFgcmKgj1FtDAYoBGJ3Q=
Subject key identifier:   9B:66:73:EE:1D:B8:AD:B6:F3:C1:61:86:77:71:41:BE:02:3F:E0:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8486D1C2447B822CF8600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b98ac31-9b12-344f-bd95-ec1e041d743d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        73.88.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:48:6d:1c:24:47:b8:22:cf:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=807856b9-7e4a-4d13-a03d-72eda6cd3e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:14:55:07:3a:b6:40:ec:d7:28:50:f9:5b:
                    fa:c1:fe:77:86:bc:73:04:0b:1c:ea:39:89:0f:04:
                    b7:24:e2:fc:e8:86:90:72:49:c5:14:30:0e:33:9d:
                    b1:f7:ac:25:31:c1:53:b5:b3:ad:1c:75:8e:b2:e7:
                    00:62:47:be:d5:54:48:44:3e:97:7e:49:1b:19:b4:
                    6c:e2:f1:d4:5a:5a:0e:33:08:e8:2d:3a:25:fa:cb:
                    d5:80:89:68:de:90:b9:4c:19:ca:40:17:84:e3:38:
                    9e:48:7a:7b:35:2b:83:9f:f4:b6:84:e3:3b:10:7b:
                    3d:8f:70:76:1b:ed:63:c2:4c:97:2f:6c:02:50:cd:
                    01:19:76:69:ff:1b:b9:cf:22:7a:b0:63:de:c2:70:
                    90:38:e7:1d:b6:1e:ab:48:22:9f:41:ee:ea:7d:80:
                    24:bb:e8:13:d7:a7:b2:48:d6:db:69:b6:e9:40:39:
                    2f:5d:0c:98:29:2e:a3:c2:ba:29:41:0a:17:31:ae:
                    bc:88:d1:22:12:39:0f:74:0d:3c:3c:50:26:cc:31:
                    78:4e:f1:08:26:2f:23:82:1c:26:df:0d:2d:bc:0d:
                    dc:b3:fd:a9:59:22:b7:b6:0f:f1:ef:d7:59:37:ef:
                    1a:6e:25:29:9f:20:18:0a:59:03:d1:50:63:5b:b3:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:73:EE:1D:B8:AD:B6:F3:C1:61:86:77:71:41:BE:02:3F:E0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b98ac31-9b12-344f-bd95-ec1e041d743d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:9b:cd:43:00:98:5a:6d:58:c7:73:24:2d:e9:90:eb:b9:cc:
         03:08:82:aa:9e:3b:b9:0b:3b:80:2a:b8:0d:0a:4e:cd:b8:0f:
         9b:ed:b2:29:57:7e:76:e7:3e:7c:fa:26:0f:41:d8:5e:2d:3f:
         d0:97:22:9d:17:49:49:5a:cb:bd:cf:ab:a6:0b:3a:e9:a7:f6:
         87:7f:69:9b:af:f9:ed:3a:19:db:58:b3:25:2f:b6:64:50:fe:
         b6:3a:b7:a7:9a:9a:d9:97:57:59:8d:2f:fc:4c:c2:e2:b7:32:
         73:a6:90:c3:f0:79:f4:bc:75:43:e9:08:d8:5d:91:c2:18:5a:
         94:22:9f:b5:91:43:a0:9a:50:db:15:42:03:3e:16:d8:ec:a5:
         f3:22:63:11:b5:ad:46:16:a1:ef:a4:c2:9b:b5:8b:5e:5b:f3:
         15:33:19:64:03:59:d1:b5:c4:e9:6a:c1:5b:49:45:ff:fc:36:
         f3:03:3c:9d:d5:29:55:c7:0a:ba:16:98:a9:db:e4:1f:f9:61:
         34:54:b0:1c:92:d9:60:dd:df:bc:e1:52:4e:d8:8b:42:c0:69:
         bd:0c:2b:77:7f:d2:71:a3:b3:cc:1e:f6:1c:da:ae:6a:a4:f0:
         ed:27:58:ca:73:56:90:02:c1:55:3d:6a:2b:3f:ca:ee:2c:0e:
         b9:6b:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:54 2024 by rpki-client on console-ams.rpki-client.org