Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0ff4aa-5bc1-3215-b80d-feab05d0373e.roa
File:                     1f0ff4aa-5bc1-3215-b80d-feab05d0373e.roa (raw, json)
Hash identifier:          8FusQQmGOjN2ev9sjSbLbry60zOQhR1x03TutphJue0=
Subject key identifier:   4A:56:B7:DB:32:75:AD:D6:B6:37:B9:F2:24:E8:FB:7C:E8:54:27:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABF7A16035C44D6AC0AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0ff4aa-5bc1-3215-b80d-feab05d0373e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        73.164.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:f7:a1:60:35:c4:4d:6a:c0:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=dfcf8e01-207b-4266-b485-361d8307f493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:e5:c7:78:ae:5a:40:0f:dd:f7:78:f7:28:
                    30:57:f7:16:da:b0:86:ec:3d:75:f9:11:c9:0f:a3:
                    be:ee:4b:24:6a:e7:00:c8:6e:53:6c:f7:13:32:e7:
                    39:ff:46:da:01:41:cf:00:b3:7c:2e:42:56:61:d9:
                    f7:f3:3f:ca:e0:8c:34:1b:77:3c:5e:4a:1f:d6:d3:
                    38:bf:43:62:6e:3f:4d:36:55:83:b1:a7:3b:60:ae:
                    f9:36:52:2d:5f:bb:13:b4:9c:58:96:62:64:ea:40:
                    86:c4:5a:ef:a7:15:9c:c7:42:31:3b:14:95:8e:4e:
                    9d:11:cc:41:a9:83:35:9f:78:b9:a3:cc:34:ef:6a:
                    52:0e:aa:49:8c:39:9f:e3:13:16:c2:a1:0a:0c:83:
                    3e:8e:08:b3:55:71:2f:65:68:86:f6:32:5e:e4:19:
                    e1:1a:0d:c1:f5:78:41:7f:95:0c:50:8c:95:1f:bb:
                    34:e1:ea:77:ca:51:b9:d3:53:41:ab:8e:02:78:ef:
                    f3:a5:7b:74:64:79:09:bd:72:22:35:28:98:e9:f6:
                    44:ce:35:6e:78:cb:40:46:84:c4:d1:a7:c3:6e:58:
                    09:5c:32:11:9f:49:6f:0b:04:0f:46:cf:89:a8:89:
                    cf:e9:ff:07:da:37:63:60:70:5a:5d:31:88:fd:fc:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:56:B7:DB:32:75:AD:D6:B6:37:B9:F2:24:E8:FB:7C:E8:54:27:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0ff4aa-5bc1-3215-b80d-feab05d0373e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:f8:ee:dd:19:76:f1:35:61:b0:d1:9f:72:2c:50:8b:41:
         03:fc:1b:0c:cf:ae:7c:34:48:5c:46:87:ce:f9:7a:22:e0:7f:
         03:fe:84:25:51:d1:b5:8d:35:13:24:56:0a:d3:63:7e:56:b6:
         4c:41:64:95:32:0e:37:2a:37:01:a1:78:3d:9c:db:a2:5d:99:
         18:40:0e:90:6f:0b:a4:b0:b7:88:b7:26:b4:4b:6f:94:77:da:
         b9:94:b1:ab:8e:cb:17:58:5d:a0:42:cd:bf:e1:11:77:95:57:
         7a:b2:17:d4:a7:4b:5d:b6:d3:b4:96:ab:e0:26:7c:f6:d4:97:
         a4:90:9b:73:75:72:c4:d2:78:ab:58:34:82:91:be:8f:1a:8a:
         ca:66:e9:67:e0:d4:a4:81:81:ca:b6:97:81:be:5b:d2:9e:0d:
         91:3c:d4:fd:d0:7c:67:a3:31:e0:97:a1:ec:e9:87:20:14:67:
         f3:12:e5:72:1a:81:6c:75:8b:92:44:bd:68:6a:64:f5:4c:61:
         3f:bb:ec:90:80:ec:6b:0c:40:c5:bc:10:34:40:87:25:75:83:
         80:ec:93:ad:09:c0:5e:cc:77:f5:de:af:3a:d8:9c:0f:96:73:
         fb:8c:77:57:9e:87:90:85:77:6f:18:49:af:d6:81:f1:68:d9:
         6f:cd:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:48:09 2024 by rpki-client on console-ams.rpki-client.org