Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4428b9-fbd1-3b11-a95d-02945f646d33.roa
File:                     1e4428b9-fbd1-3b11-a95d-02945f646d33.roa (raw, json)
Hash identifier:          bO4x5uKdHSF6kJYMk9oedwNIPrgAHwC90GKmUsRRHhU=
Subject key identifier:   29:EA:96:99:F2:84:46:26:55:DE:20:87:B6:98:A3:F6:DA:6D:37:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7215AD5F1AE89DD9F1200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4428b9-fbd1-3b11-a95d-02945f646d33.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.68.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:21:5a:d5:f1:ae:89:dd:9f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=dd402764-bbd2-4b88-8cb3-ea9b3fe4bd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:8a:83:a4:9a:35:4a:04:4f:5f:f7:51:a0:
                    e5:4e:29:3b:34:d6:39:92:79:f1:1e:27:df:11:a1:
                    89:f6:5e:45:83:db:bc:25:d9:05:90:2c:fc:1b:45:
                    c7:df:90:18:f1:d1:ad:2e:8c:c4:72:b2:88:5b:49:
                    3f:c3:6f:d9:b9:36:56:2c:fa:bb:c0:1e:c5:b4:e9:
                    8d:2c:65:7d:5f:9e:de:04:d8:50:db:65:a4:e3:bf:
                    f5:55:ac:d7:46:2a:7b:65:57:93:e4:a8:6a:53:fa:
                    f2:24:b3:95:f0:3b:57:81:33:56:aa:06:d7:67:b5:
                    22:9f:3b:6c:e9:50:13:e4:2b:b2:84:7d:80:01:65:
                    70:53:e8:43:fb:3f:fe:c9:78:a7:61:b8:8b:e1:b3:
                    d7:57:30:57:8b:c4:81:06:97:c2:9f:1d:f4:f7:c6:
                    b3:a6:9b:b1:88:c6:26:78:bf:2f:8e:39:51:80:d3:
                    99:a0:7a:62:34:01:42:b5:38:c3:0c:80:aa:a5:5f:
                    a0:49:bb:ba:fb:37:9f:8f:e9:57:69:f3:f4:bc:ef:
                    61:da:df:b8:08:e1:de:ff:15:21:59:3f:7d:d6:65:
                    b7:30:cb:4e:50:31:d9:ac:0c:fc:0a:35:97:56:45:
                    ab:1f:91:60:d3:ed:e2:35:1b:3c:5e:64:e0:44:ab:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EA:96:99:F2:84:46:26:55:DE:20:87:B6:98:A3:F6:DA:6D:37:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e4428b9-fbd1-3b11-a95d-02945f646d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:2e:34:9a:85:d4:0e:39:1f:6a:2a:80:b7:e4:70:e4:16:21:
         77:11:76:c9:b4:b5:e6:66:65:af:14:80:b6:16:f6:82:a9:a7:
         4d:ba:bf:49:ca:8c:34:76:a8:3e:17:72:d5:6a:39:12:7e:8d:
         ca:ef:a6:11:ec:56:76:80:f8:21:08:c3:87:90:28:5d:32:0b:
         46:3b:ea:bd:d0:1e:5c:9e:3d:b7:41:64:a6:d5:c4:cb:97:d7:
         9c:78:60:9e:b2:d5:b0:d4:8d:81:85:70:a9:43:5f:ff:39:5e:
         59:76:13:93:c9:6d:f5:05:b8:0f:ba:2e:06:c3:34:26:c7:77:
         3e:a2:18:fe:a4:04:aa:d8:fc:4d:ff:f4:94:ff:3b:3f:1e:d0:
         54:ba:91:4a:df:cb:4c:60:10:79:b6:90:2a:c2:06:70:fc:89:
         39:9e:c1:31:c8:39:b5:b0:e0:35:b1:60:ce:9a:aa:a1:84:e1:
         95:22:a2:f2:e3:98:e8:76:f5:56:7a:df:79:49:00:36:eb:e1:
         75:c4:da:d3:af:26:45:9f:31:98:f8:47:b1:0e:a1:8d:31:ba:
         b0:ff:c0:e1:4f:9f:55:9e:54:54:f5:32:3d:57:4f:4a:59:ee:
         4f:04:7c:67:8f:e8:03:e2:e5:f7:4c:66:bb:5d:c5:4f:82:74:
         75:1d:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:54:29 2024 by rpki-client on console-fra.rpki-client.org