Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa
File:                     1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa (raw, json)
Hash identifier:          qsIFOVakZaYVcOLTMzHHZEJRoa6n4OLAa9VueV3l4xE=
Subject key identifier:   F5:1B:B3:7F:6C:8E:30:D7:FD:39:7E:83:AF:93:2B:E3:F2:9A:44:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C2CB8CF7293ADC300DD16
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.209.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:2c:b8:cf:72:93:ad:c3:00:dd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e83c54e9-7be4-4072-b9a8-fa2059b8a289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:cd:e2:fc:01:e1:e7:7b:c4:84:a5:bc:32:
                    77:82:c7:87:22:d3:c5:11:72:b6:97:9b:4f:31:80:
                    ce:52:c4:0f:55:bd:3b:f2:fb:b4:6a:d3:ec:c4:e9:
                    15:b7:a3:4c:c4:42:09:50:13:73:a2:3c:99:cb:f4:
                    ed:70:6d:20:71:c9:24:2d:c6:83:88:3d:99:27:9c:
                    76:33:3f:f4:dc:24:fd:81:55:8a:22:8d:01:b8:a5:
                    41:12:ac:e6:c7:55:4d:a1:25:8a:77:c5:f8:41:98:
                    7a:d0:91:6a:4d:70:1b:af:7b:d5:78:6d:e9:09:da:
                    dc:6c:db:32:9b:1d:35:02:ec:d6:d1:7d:3d:62:38:
                    28:c5:9a:74:c6:ec:0e:84:62:c2:99:a0:63:f9:60:
                    16:eb:a3:b1:e6:93:cf:8d:b6:a3:da:4b:39:aa:f6:
                    b9:d8:07:72:ad:88:a1:fd:a9:89:fc:5b:aa:71:c4:
                    21:11:0a:59:42:e8:92:d8:0f:ce:9e:ae:6a:00:2b:
                    c8:04:9b:eb:08:c3:bc:22:48:35:12:a1:16:fb:96:
                    00:1c:cf:99:9b:da:d4:8a:c4:d9:6e:e7:dc:74:26:
                    29:2d:d2:1b:19:9c:64:97:83:68:a6:f5:88:1b:a7:
                    ce:d9:28:0b:e6:8f:87:6f:93:fa:2f:b1:ac:08:3c:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:B3:7F:6C:8E:30:D7:FD:39:7E:83:AF:93:2B:E3:F2:9A:44:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:29:cc:db:f9:83:d3:45:48:38:29:eb:1e:92:42:fa:28:0c:
         40:be:53:06:9e:eb:15:87:d8:2f:46:8c:2f:ff:d9:33:c9:ec:
         c7:e3:97:cb:d0:e9:e2:e7:ed:34:eb:1c:7e:4e:bf:94:b3:54:
         a1:1a:6a:ce:59:d6:56:1f:db:42:6c:54:cb:a3:9d:9f:62:98:
         da:73:31:c0:0d:35:21:e2:c8:02:66:1e:37:50:78:ab:09:3a:
         7a:97:d9:f4:7b:7d:8d:fc:c1:62:c5:86:bf:d8:80:bf:76:79:
         85:38:b6:9b:ff:3d:7d:f0:5c:01:74:6a:38:8c:26:13:90:2e:
         29:47:18:22:1b:57:a7:99:61:01:37:a3:08:90:fc:81:d3:56:
         5f:59:78:ec:c8:65:59:36:77:aa:af:fa:f8:78:25:89:e0:3c:
         64:08:63:cf:ce:1e:34:34:24:9b:27:3b:fa:3f:a1:0b:4a:89:
         5b:2b:d2:04:a2:08:42:c9:49:d1:2b:23:d3:3c:8e:b7:91:39:
         99:e6:73:0e:d0:c1:cb:b7:48:66:1f:1d:5c:13:47:db:9a:c2:
         ab:85:46:28:07:18:50:55:81:5a:85:71:c1:42:de:58:22:04:
         c8:77:cd:91:f8:09:e7:a5:90:40:a9:c5:55:50:9b:e8:11:c8:
         04:02:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:35:21 2024 by rpki-client on console-fra.rpki-client.org