Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c75e872-4249-39c6-b3e9-983d0c29feae.roa
File:                     1c75e872-4249-39c6-b3e9-983d0c29feae.roa (raw, json)
Hash identifier:          SiuVTkTfUeNYoyn7vqfHu9YLPt7qPJ4RoEQpqvHf0L4=
Subject key identifier:   6A:17:85:8D:73:F6:91:CE:4E:78:19:D3:CE:7E:37:CF:9E:D4:A9:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E08331F28FE1922F5C480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c75e872-4249-39c6-b3e9-983d0c29feae.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.215.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:08:33:1f:28:fe:19:22:f5:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=a4a3a1ef-2c76-4abe-9754-a2f8ef7ba015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:33:0d:4c:17:a1:d7:09:ef:1d:75:20:dc:
                    03:98:24:57:1d:fe:34:1d:fd:01:dd:4a:36:89:80:
                    06:e7:2f:da:eb:95:7c:00:97:d0:cb:45:36:cf:9d:
                    25:8c:be:26:2e:12:09:e3:c1:b6:bd:9d:8d:f4:9e:
                    5a:38:1e:e9:61:73:f9:54:32:f3:56:e7:8a:04:9e:
                    80:15:cf:dc:9f:64:c1:c8:98:16:c0:e5:ff:ed:1b:
                    46:a2:33:b5:0d:ec:69:a9:05:8d:e5:9b:d8:4c:2d:
                    0c:39:af:ec:2f:76:9d:1c:4e:fc:dc:69:0b:4a:bd:
                    77:a1:3d:94:2b:8f:b7:be:5f:c1:5c:81:86:24:ce:
                    ca:a2:28:0d:93:e1:e0:17:63:08:95:ca:68:55:2f:
                    76:f0:ce:13:49:20:8b:cf:51:c2:a8:cc:06:e7:e4:
                    38:4f:82:f7:4a:ae:64:d0:65:d9:98:fc:67:de:82:
                    83:68:f2:f6:d2:b4:98:1a:83:88:40:e1:b8:ee:aa:
                    9e:61:b4:71:e0:55:d8:02:4c:70:5a:30:10:8c:ce:
                    12:dd:af:2a:30:da:e8:bf:c4:54:e4:c2:90:90:64:
                    b7:ff:a2:d7:4d:ba:75:b9:72:0d:28:c4:db:16:96:
                    b2:15:f1:a3:67:d1:9b:46:f8:95:82:46:a8:f7:75:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:85:8D:73:F6:91:CE:4E:78:19:D3:CE:7E:37:CF:9E:D4:A9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c75e872-4249-39c6-b3e9-983d0c29feae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.215.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:4f:3c:76:ea:f7:e2:44:88:e2:6a:39:33:02:a5:23:02:
         02:a0:4e:a4:5f:f2:56:39:67:66:1b:93:67:08:eb:5d:72:79:
         a9:6d:24:4f:7b:33:cb:fc:62:cf:6c:7e:f3:c2:eb:67:1a:41:
         e4:35:d1:aa:53:78:a1:d0:9b:d5:ea:81:62:51:4f:2c:b6:24:
         f9:49:cc:b3:48:c2:22:02:94:55:6d:bb:b1:8b:19:1d:e7:e2:
         85:e4:9d:32:1f:67:b1:ec:03:2f:36:f2:3c:21:3b:a4:01:8a:
         2c:f3:37:6d:64:22:e7:e6:ad:4a:fe:c7:39:7f:09:38:4b:22:
         08:79:ed:3b:c7:e8:76:f0:6d:1b:c8:46:7d:59:9b:9b:12:15:
         81:e1:f4:69:fc:fd:48:23:2c:b8:05:bc:a4:92:93:79:c2:4c:
         92:69:c1:e0:4d:96:bf:4c:12:f6:bb:b7:28:22:96:68:1a:4c:
         2e:50:17:e5:08:4c:0c:07:3f:e5:a0:68:6c:80:86:21:f3:e5:
         09:03:4b:b8:74:f8:c3:f8:95:cc:a0:7b:28:c2:c5:7c:8a:b8:
         4c:cd:bb:c9:e1:bc:d4:3e:8f:17:07:14:78:ef:eb:4f:e9:8f:
         f3:58:1e:66:95:58:41:41:e1:59:2a:2a:e0:17:14:d4:62:1c:
         5e:2f:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:54:20 2024 by rpki-client on console-fra.rpki-client.org