Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27c697d8-6213-369d-9636-6865e9e2458b.roa
File:                     27c697d8-6213-369d-9636-6865e9e2458b.roa (raw, json)
Hash identifier:          EQqVaRAgzeEMUxEhF0hvDCal1j9pb01KWXL3QkW/we8=
Subject key identifier:   52:18:C7:8F:DC:74:9F:26:E0:05:F6:B9:E4:35:2A:1B:88:A6:45:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D3A6799DC6A242A9FDA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27c697d8-6213-369d-9636-6865e9e2458b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.202.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:3a:67:99:dc:6a:24:2a:9f:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9576d12b-fcea-4d40-a99c-14c50b07abd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:30:b9:32:6c:bc:84:e9:5f:22:90:81:2f:
                    25:3f:2d:7e:2a:25:f5:e5:69:2a:bc:82:03:6b:b1:
                    6c:8b:f2:5d:94:ea:5c:29:d4:fe:a5:4b:92:cd:e4:
                    97:8a:0a:61:df:9c:04:35:30:09:ef:79:77:66:8e:
                    79:02:31:a2:d6:a0:3d:24:69:98:47:71:8d:61:66:
                    7f:74:91:9c:e7:63:f6:13:3b:ca:23:74:93:53:0b:
                    f3:41:db:5b:db:cd:ec:30:a4:a9:1c:20:8a:46:a3:
                    5c:74:c8:63:84:cd:e6:35:1c:4c:ab:61:8b:ff:66:
                    4d:ae:0f:e7:b3:dc:e0:89:5a:d4:71:1b:31:44:3a:
                    7b:64:9d:d4:f7:a8:09:77:1f:c5:12:54:02:cf:68:
                    90:77:bd:1d:d1:07:d2:49:59:ff:98:00:eb:55:a0:
                    ec:f9:1c:7b:1a:ee:80:80:ea:06:c5:cc:4c:27:8d:
                    bc:b2:90:a6:02:e7:3d:e5:e7:e9:2a:eb:c4:8b:11:
                    ac:e5:a9:ec:80:d6:d7:23:a3:52:e7:e1:0f:5b:dc:
                    21:37:a9:2b:72:55:ef:a4:72:91:f3:e6:08:e2:1d:
                    8c:d3:be:a6:e7:9b:bc:18:cd:f4:2f:54:61:62:13:
                    0d:3a:44:c1:54:6f:ac:3b:ce:e5:87:e8:7e:a6:35:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:18:C7:8F:DC:74:9F:26:E0:05:F6:B9:E4:35:2A:1B:88:A6:45:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27c697d8-6213-369d-9636-6865e9e2458b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:9d:4d:11:80:75:5c:fc:fd:33:f5:70:47:ea:53:e4:bd:
         56:12:e1:14:99:26:ca:6a:18:c0:9c:b6:4b:9e:06:af:47:78:
         d2:4d:d8:27:74:1f:46:8f:d0:9e:bf:63:eb:8c:53:a5:ff:49:
         92:f4:5c:fc:1f:60:97:fe:4b:2b:04:0a:79:88:86:4e:3b:04:
         38:64:ca:de:3c:5b:c8:1e:b5:59:36:66:bd:62:e4:61:01:bb:
         99:d4:6b:f2:98:4e:7b:3e:32:ae:18:bc:bd:0c:90:34:aa:5d:
         ff:08:0a:b0:42:8e:02:24:ff:f3:3c:7d:ee:34:a3:f3:65:f2:
         8b:f7:cd:8c:74:50:28:b4:ea:b4:44:3d:90:a3:5a:42:4e:ef:
         e8:53:0f:08:4e:46:bd:70:db:c7:c8:65:2f:cf:53:54:63:08:
         fb:a5:0e:cb:29:1e:b5:73:3b:7b:62:c5:47:61:e9:01:37:dd:
         e7:38:0c:02:59:f8:cb:b6:a4:64:1a:c7:ae:95:ec:74:1d:53:
         af:9c:e4:05:c9:a8:7a:53:de:80:a5:53:27:89:95:a4:be:e2:
         9a:45:ee:f9:04:b3:c4:80:48:3a:f7:2e:1d:17:27:7a:d7:16:
         9c:7a:8e:09:1a:70:17:5c:a9:a1:a6:c1:b8:76:ef:a0:01:c6:
         af:b8:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:56:14 2024 by rpki-client on console-ams.rpki-client.org