Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943e9f0-b79f-3de7-bdd1-4969dc55ca95.roa
File:                     2943e9f0-b79f-3de7-bdd1-4969dc55ca95.roa (raw, json)
Hash identifier:          BWmOxUJpdELDlzQohXqOOe99s0z5hiYk9s3oFE6Zx84=
Subject key identifier:   2D:C5:F2:E8:8A:94:4F:C4:A2:8F:10:C4:C0:CB:F2:5C:C9:86:09:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FDC0C26042AA9C8351FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943e9f0-b79f-3de7-bdd1-4969dc55ca95.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.2.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:dc:0c:26:04:2a:a9:c8:35:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=230f0bc1-fbd8-4b6a-ae99-b6db372c8f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:ce:49:db:2a:68:4a:43:0a:51:26:cb:f1:
                    dc:81:5a:f8:8c:d9:2b:c1:08:4b:84:11:d4:17:1a:
                    20:ce:db:0b:68:ab:8b:9e:a3:df:f7:60:5a:f8:6c:
                    07:13:56:7a:91:29:fd:67:21:47:05:ac:27:7f:17:
                    4c:cb:fb:ed:67:49:ef:5e:ef:6d:9d:38:4f:8a:26:
                    92:5d:4f:89:e7:9f:66:f7:a8:12:74:d3:e7:cb:d1:
                    a5:41:c3:c5:bf:22:7d:c2:fe:8b:f9:7a:c2:90:b0:
                    44:bb:37:11:92:28:a9:57:1a:71:6f:6d:2f:45:9c:
                    08:d9:75:82:ba:24:3f:4b:f0:cc:de:83:89:88:ef:
                    0d:54:8e:30:41:91:0a:dc:98:20:d8:24:58:5b:df:
                    96:6a:71:53:21:72:38:a3:69:bd:37:a8:42:dc:b8:
                    19:0b:2f:de:e4:2b:a7:64:2b:67:04:7f:34:ee:a4:
                    42:a1:64:cf:87:4e:b2:0c:a6:84:82:82:7d:d7:22:
                    46:af:e6:f7:fb:2f:7e:e9:c2:2d:2a:71:21:7e:1a:
                    0b:06:db:d8:32:db:3f:ca:f2:29:e4:8d:73:f0:66:
                    c4:e3:90:59:77:06:bb:5b:48:2e:70:28:f5:ed:7d:
                    24:32:6b:1d:9f:95:f5:8f:47:ed:8f:8c:55:1b:63:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:F2:E8:8A:94:4F:C4:A2:8F:10:C4:C0:CB:F2:5C:C9:86:09:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943e9f0-b79f-3de7-bdd1-4969dc55ca95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.2.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:53:f4:e2:fa:eb:b8:0c:a6:51:35:cb:db:50:ab:1b:58:
         f3:fe:d7:b9:6d:3f:58:d8:54:31:93:88:a9:d4:7f:46:b9:2d:
         bb:26:3b:39:42:56:97:b7:58:09:0f:88:0f:9a:fa:b1:32:39:
         59:f2:32:3e:cc:f5:72:3d:ff:1a:9c:94:d2:72:2f:20:ca:85:
         ac:b0:15:eb:4b:60:f9:ad:1b:68:65:c1:f1:ca:f9:eb:fd:7a:
         26:a0:27:b8:f0:bd:9f:03:ed:8c:03:c3:07:0c:3a:dd:fa:65:
         c3:20:a0:a9:d1:54:43:de:4b:41:1e:cc:6e:13:eb:e9:1d:89:
         5b:e1:ca:80:40:04:68:cd:e6:ea:7b:6d:5f:7a:5b:9e:6e:ba:
         1b:bf:06:c1:b1:3d:6d:c7:f6:00:11:3c:7e:2e:45:fa:c0:e5:
         d2:37:75:69:c8:45:e4:05:be:d7:33:36:06:6d:09:62:bd:0f:
         f3:1c:22:a2:f1:89:a9:37:ad:49:36:bf:64:ab:e0:89:59:b1:
         f1:56:41:5c:7e:9a:76:23:c0:1c:c1:77:b4:85:f0:fc:52:04:
         cc:36:a6:5f:79:30:a4:73:c3:7a:e1:fa:71:37:8f:e8:40:45:
         a5:f8:67:b1:56:d2:7a:ad:7e:07:c3:18:44:c4:cf:f1:28:1c:
         79:19:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:14:19 2024 by rpki-client on console-ams.rpki-client.org