Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2233d92d-20a1-3564-9bf6-4ca8b894c94a.roa
File:                     2233d92d-20a1-3564-9bf6-4ca8b894c94a.roa (raw, json)
Hash identifier:          qCeJgdKLA5OVsvMnFFyouNGBJaqK3I+IJZ14qY+d6Ak=
Subject key identifier:   54:FC:5C:7D:9C:6C:C9:62:9D:1D:6D:12:E5:25:21:55:15:2D:DA:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1211113077311CFCC22780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2233d92d-20a1-3564-9bf6-4ca8b894c94a.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.199.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:11:11:30:77:31:1c:fc:c2:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f9e3890a-c885-485c-941f-69e1947be787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:94:db:11:b9:6b:d0:73:b2:e5:77:86:d2:
                    58:13:f4:5d:f9:19:de:81:77:55:f6:0e:10:df:85:
                    7d:39:9e:31:f0:89:90:48:52:bd:f3:4f:7c:6c:6a:
                    23:4a:29:9a:d9:55:ba:5b:21:c3:75:5e:d7:0e:5e:
                    5f:f2:cf:56:fc:dd:69:80:f7:be:0f:f0:db:fd:48:
                    9e:f2:49:9d:10:b9:2b:1b:e9:13:0d:8d:ed:ed:ae:
                    2d:cb:10:4a:99:6e:9f:52:46:80:ff:78:20:63:b9:
                    ea:cc:9b:5d:cd:f8:fe:b6:39:3c:a3:96:d3:fa:bd:
                    43:36:c3:99:30:bd:26:c9:0a:e1:0a:2a:8d:9a:33:
                    b0:db:6b:d0:38:8f:e8:7e:76:8c:a7:77:91:22:15:
                    c5:b3:21:88:09:58:de:70:3e:cd:d4:87:4c:d3:0e:
                    84:c3:20:48:3b:c8:e6:51:8b:35:a6:3e:af:6e:e7:
                    a7:fa:d3:9a:14:ec:e6:8e:66:c2:aa:75:9e:01:c7:
                    1b:be:c6:26:07:6c:7c:a2:d7:11:02:d7:29:0a:4f:
                    0e:6b:23:01:45:55:25:7d:4f:68:5f:44:ba:1a:1c:
                    27:cd:d8:8e:49:c4:63:bc:ef:8f:a3:05:ec:33:7a:
                    26:0f:75:71:97:f0:c2:2d:84:82:99:11:e5:92:6c:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:5C:7D:9C:6C:C9:62:9D:1D:6D:12:E5:25:21:55:15:2D:DA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2233d92d-20a1-3564-9bf6-4ca8b894c94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:52:f4:ff:da:23:72:df:3e:6e:a0:a5:59:de:02:fa:37:
         60:bb:a1:43:f7:ff:b9:4e:60:be:b0:11:de:64:12:9b:57:91:
         50:5f:20:c5:e8:50:1a:87:3c:1e:80:59:f9:d8:7f:23:ca:a1:
         68:3a:45:1b:ba:08:bd:33:00:28:41:db:28:22:46:7b:71:0b:
         d2:dd:db:89:18:32:53:a8:1f:75:ce:9c:9e:4a:20:9f:7a:53:
         fc:58:88:d1:e8:22:c4:47:ed:b9:7e:14:9a:e4:c6:9b:3d:91:
         10:33:16:e7:4b:79:a7:4e:9b:99:f0:15:4f:8d:2e:1f:8c:05:
         0b:d3:a8:b9:a0:8f:25:77:e8:5c:3c:39:4e:f8:40:df:94:e7:
         30:46:b2:e4:24:e2:58:ac:32:29:89:f4:ad:9d:0c:e0:e1:d9:
         4a:41:95:d8:ab:58:6f:a4:ae:dd:70:2e:ea:05:9a:83:49:ac:
         33:90:44:e9:e6:8f:c1:fd:bd:93:ce:5d:97:6d:05:9a:a1:0a:
         11:95:f1:ff:b6:75:91:bd:57:4d:18:b8:6d:2d:d4:a2:16:0e:
         06:40:b2:b1:32:f4:1d:34:2f:7f:1b:7c:c9:3d:1a:67:f7:a3:
         2f:3d:02:24:3c:5f:a4:15:07:f1:4f:96:a0:e2:ee:fe:32:aa:
         8c:18:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:36 2025 by rpki-client