Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139928eb-eda5-3122-9bcd-e9cb0ca11036.roa
File:                     139928eb-eda5-3122-9bcd-e9cb0ca11036.roa (raw, json)
Hash identifier:          CFCPhmZlsTqQIWBKMZ6mucfe+Zp0XpKCqqtVOpEzO50=
Subject key identifier:   EB:FC:FF:16:66:8D:DF:3B:AB:6A:D8:D8:0F:AD:D3:5C:59:29:36:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D5C692B301685B4CA4BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139928eb-eda5-3122-9bcd-e9cb0ca11036.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.70.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:5c:69:2b:30:16:85:b4:ca:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d489afad-e661-4488-a576-091f77eeebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:8e:e1:78:45:fd:01:82:37:6d:e9:93:ea:
                    e1:1d:a9:35:45:17:11:df:58:cf:c3:2a:ae:40:9f:
                    44:54:22:c4:da:e9:ee:a0:4c:96:58:76:7c:42:bb:
                    4c:f7:85:1a:c0:f2:e1:c4:41:77:4e:3a:18:06:d9:
                    fb:95:5f:64:07:cc:87:c3:5b:8d:48:ce:6e:e4:ed:
                    bb:08:8f:0e:e1:81:b8:6c:2e:5d:1b:1a:f0:6e:47:
                    8c:44:f4:ef:9f:c9:7e:af:6e:1a:46:c5:61:20:3f:
                    e2:fc:28:92:0b:38:25:d9:5d:01:21:59:6b:55:1b:
                    39:11:23:43:0f:08:85:4b:05:18:1d:40:87:b3:a8:
                    6a:11:9c:6e:61:d0:be:ec:ed:85:48:e1:01:43:86:
                    55:3b:80:e7:d2:b6:41:7b:91:37:ad:87:fb:81:e3:
                    7e:2b:cc:71:24:1e:3a:4c:46:17:90:06:57:d5:e3:
                    c1:b3:22:54:53:cc:6b:c2:04:34:04:9b:19:d8:ec:
                    64:db:20:8e:38:49:0b:6b:2f:86:7a:af:f1:95:d2:
                    84:f7:27:56:3f:92:b7:b3:13:de:29:60:b1:e2:9a:
                    8b:b9:64:6f:86:1e:68:21:62:09:72:5e:8f:79:07:
                    e0:fd:9f:d6:0f:e8:9e:46:80:79:75:f8:fd:bd:14:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:FF:16:66:8D:DF:3B:AB:6A:D8:D8:0F:AD:D3:5C:59:29:36:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139928eb-eda5-3122-9bcd-e9cb0ca11036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:bf:89:49:47:fd:d4:50:f8:37:44:16:e4:1e:ad:6e:37:51:
         21:f0:70:e3:97:d5:5b:e8:b2:9b:cd:58:ad:7c:2f:de:f6:5b:
         fb:7d:b4:e9:f8:53:3a:97:bd:93:d7:c1:07:20:b9:5f:1c:a2:
         3a:f2:e2:1f:17:cf:3d:33:37:ee:b5:ac:0a:dc:2a:30:b6:31:
         b1:e6:f0:08:35:45:4d:dc:9c:e2:04:16:90:d0:07:a9:92:d8:
         23:af:65:8a:5f:ec:d8:3f:09:f8:c9:a6:cd:a3:ad:6d:4e:f3:
         73:64:92:a6:70:5b:b1:b6:be:8d:19:b5:b9:d9:3f:4b:dc:ce:
         29:e4:6a:48:ef:e6:39:34:ab:bb:9a:08:4c:79:d7:dc:62:fd:
         2d:1c:91:7e:ae:7c:fd:b4:6f:1c:30:16:f7:93:3d:12:11:56:
         b7:93:e9:8b:59:12:a8:9c:58:b2:2b:8c:75:76:59:aa:ef:d7:
         71:90:0b:34:64:81:30:c9:71:d0:db:6e:1d:36:4d:f5:3e:73:
         1b:ba:ab:7b:23:3c:a4:e2:d3:c9:f2:a1:0d:73:9b:df:76:5a:
         9e:cb:da:ca:39:07:45:b7:d9:b3:d9:d8:64:67:71:2b:25:84:
         80:55:d6:95:a9:12:25:6b:e6:8f:6d:a7:a7:a9:3b:fc:76:81:
         27:b1:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:54:29 2024 by rpki-client on console-ams.rpki-client.org