Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa
File:                     1651a64b-774a-3bf5-94d3-0268f323468f.roa (raw, json)
Hash identifier:          5etnq0ue4lc6fjY53yo5P8JsCF9trPlu+YS3IrR5kzc=
Subject key identifier:   61:59:25:B7:74:81:D4:F7:89:26:09:C9:03:92:CB:83:C1:CD:71:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C4CB6E3ABE4B628391780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.36.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:4c:b6:e3:ab:e4:b6:28:39:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e15084a3-4a43-4f7b-a8a5-4b3ff12bace7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:43:de:28:45:44:dc:a3:6a:01:cc:b6:cf:
                    c4:dd:b5:70:6f:a8:fc:95:34:19:ac:45:70:1f:32:
                    2b:3d:6f:bc:75:84:d2:ee:8e:c4:c0:87:fe:f2:de:
                    17:f1:19:dc:95:1d:d7:4d:0b:a0:83:d1:87:4e:69:
                    c7:eb:42:27:ea:61:df:dd:b6:25:f4:20:e5:0f:cc:
                    c2:73:de:f0:5e:68:ef:79:44:ee:34:07:bc:b4:bd:
                    cc:4f:01:47:d1:5d:0d:29:31:36:5c:d5:13:6d:41:
                    bf:40:3f:48:40:eb:1e:60:c9:00:95:5b:ba:5a:fd:
                    00:25:a6:6d:46:c8:62:de:ca:99:3b:f5:d9:1a:21:
                    da:9d:24:30:c9:c5:45:99:db:61:cc:88:c2:16:01:
                    32:e8:90:eb:a5:04:1c:05:d3:d3:99:5a:69:66:db:
                    ba:83:0b:a1:39:e1:a6:48:4c:62:d4:19:6b:59:4b:
                    bb:c4:f6:a1:2f:d2:aa:ef:ce:1c:42:d3:b8:37:b8:
                    c0:79:77:31:fc:08:28:c6:27:f3:b4:e5:f7:46:95:
                    86:d6:20:f8:16:ad:63:f7:3f:aa:9d:a4:2e:ef:72:
                    50:7d:0f:66:a4:b8:2c:56:ff:b8:ab:f4:59:b7:4b:
                    26:ea:61:87:e2:5b:f5:bd:ba:6e:1a:07:b5:75:a7:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:25:B7:74:81:D4:F7:89:26:09:C9:03:92:CB:83:C1:CD:71:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:91:a8:0e:df:63:e7:46:4c:ab:14:8d:89:1f:32:fc:45:
         80:6f:f4:a2:2a:11:92:49:d5:a0:63:57:fe:5e:04:a3:ac:f7:
         7f:9c:0d:a9:60:d4:86:95:8c:08:36:60:f6:78:c1:5d:aa:af:
         0e:ef:6e:ac:23:0b:ab:bf:46:df:1a:79:8c:7f:25:52:8e:cd:
         96:33:95:87:10:df:90:21:0f:1d:78:85:10:af:8b:8a:c3:f6:
         3f:ce:69:f6:39:56:fd:e1:51:26:b4:59:07:d4:f3:1f:07:46:
         a9:9d:40:2c:3a:0f:a8:f8:75:6f:43:96:16:b5:5c:45:28:b5:
         5d:51:b1:2f:46:47:3a:e6:8a:1f:0e:42:66:fd:4c:4f:c0:39:
         38:53:9a:b0:df:f2:20:0f:be:88:b3:cb:32:fd:35:aa:9e:b7:
         f8:f6:3a:33:5e:58:c1:ae:44:d4:5c:de:3f:28:e6:bd:ff:eb:
         bb:26:7d:fb:c3:a1:57:da:60:34:b6:40:d6:c3:5c:db:6c:80:
         f9:2c:85:1a:b6:1e:12:ee:93:57:fa:9b:d3:c5:7b:22:11:74:
         d2:40:8d:73:db:86:1a:3e:95:3b:76:27:0f:b3:4e:b1:f6:c5:
         80:68:57:a5:b3:e1:b8:4d:fc:ad:14:de:81:8a:f6:92:e7:71:
         87:a1:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:34 2024 by rpki-client on console-ams.rpki-client.org