Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15568689-6457-3362-a745-3bf65873d5bd.roa
File:                     15568689-6457-3362-a745-3bf65873d5bd.roa (raw, json)
Hash identifier:          iKVN3JVUwbgWyG3pY5EZ+PWFXTeJVROXiUUm6iVY+dk=
Subject key identifier:   79:BC:C3:6D:B0:0D:E3:C3:41:F3:6A:61:F7:41:2F:63:A9:BE:88:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E8E452C6CC2EB6E26F740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15568689-6457-3362-a745-3bf65873d5bd.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.195.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:8e:45:2c:6c:c2:eb:6e:26:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8213d4fd-98de-4d24-91b7-053bc4cf94b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:10:02:4c:ae:f4:8b:5c:eb:67:77:ef:3a:
                    9a:c9:f7:d1:5c:b7:e2:9d:63:cb:62:22:b8:25:ff:
                    e8:de:bf:a1:2b:69:c6:25:22:34:9f:43:2e:5e:ba:
                    33:c1:36:0a:be:87:1d:f9:ce:0e:b0:bd:d8:8f:d0:
                    c4:86:68:da:9b:ed:45:b6:c5:08:90:04:ef:ba:4b:
                    ba:ec:30:51:a8:0f:93:b5:93:12:66:e6:3c:92:a9:
                    cd:e8:86:48:19:13:91:3f:36:ce:8d:fa:e7:a3:fa:
                    6e:8d:f2:64:a0:0d:9c:2c:eb:55:89:af:87:e0:86:
                    46:ee:12:48:df:c1:ce:cc:d1:f2:39:ac:32:11:fa:
                    f5:11:4d:e8:9a:08:19:ec:46:99:9f:41:b9:d4:87:
                    b8:94:a7:5b:d7:44:ff:ca:81:8a:87:e0:93:69:5c:
                    54:0b:1c:69:4e:59:47:91:83:42:53:26:4f:30:bc:
                    70:cf:d8:e4:e5:32:69:c3:c0:b6:20:b6:31:6a:2f:
                    5e:16:57:a2:eb:b5:27:9d:28:ec:d9:18:02:a1:ad:
                    d3:83:38:9b:2e:3a:c4:61:e9:ea:8a:94:f1:b6:9c:
                    d2:ae:e0:78:39:ee:3a:91:08:cc:8e:39:b5:f3:12:
                    97:36:bc:d3:99:d1:c0:a7:97:73:1b:f7:65:b5:cc:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:C3:6D:B0:0D:E3:C3:41:F3:6A:61:F7:41:2F:63:A9:BE:88:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15568689-6457-3362-a745-3bf65873d5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:95:3a:05:a2:0e:16:0f:d6:8a:70:3f:75:42:15:90:d8:
         fc:ce:15:cb:d5:44:11:44:b5:54:7c:83:c2:00:c3:ce:73:59:
         fe:b6:4d:9a:2f:65:e6:af:c4:01:c0:84:fa:1e:ca:2d:69:ba:
         19:f7:21:39:77:31:a5:ba:64:dd:c5:80:5b:d6:dd:e5:11:67:
         74:5d:73:a8:04:32:0c:69:99:34:41:e2:94:1b:81:d8:d8:9a:
         94:4c:6a:ee:42:e7:95:f4:e2:bf:44:7b:45:27:d6:31:bc:7d:
         ef:f6:d1:bc:e4:e3:e5:24:ba:87:f8:1f:1a:b1:04:fe:f1:08:
         6c:04:b8:53:48:c7:ca:e8:ae:08:f2:a9:a7:04:11:eb:d3:df:
         94:50:32:97:d1:f8:45:50:d2:3a:f8:c7:37:41:91:12:89:53:
         36:e7:b9:8b:88:4d:13:da:6b:17:02:f6:0a:88:b2:66:b3:9f:
         f4:5c:1e:a8:a1:b3:70:68:21:c6:42:b7:30:c3:9a:3d:63:34:
         33:4a:66:ba:0b:f8:65:0a:c3:4f:25:6f:e8:8c:71:d2:0e:7b:
         07:bd:0e:63:9e:51:8e:68:19:21:b4:fd:a2:27:04:c8:a4:bc:
         5e:71:c4:53:aa:a1:43:5a:fc:98:63:78:bb:f1:13:42:8b:3f:
         e2:84:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:52 2024 by rpki-client on console-ams.rpki-client.org