Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3c6310-9358-3378-8922-9fe5e661f097.roa
File:                     2b3c6310-9358-3378-8922-9fe5e661f097.roa (raw, json)
Hash identifier:          nAEd5hU5/vyuyEwSsssAEngX0EI2vd81MAW3FdRqQxA=
Subject key identifier:   B0:BA:A4:BC:30:80:D1:B4:90:D8:95:BA:31:B8:D9:60:84:A4:AE:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C63ED6BA73B443E2A8000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3c6310-9358-3378-8922-9fe5e661f097.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.51.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:63:ed:6b:a7:3b:44:3e:2a:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f54722f9-f537-415e-bd19-71cd470a7bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:60:04:da:cf:f0:bf:e6:ae:ac:7a:ea:f3:
                    b3:eb:f6:00:4d:99:9d:fd:21:bd:51:d2:52:38:dd:
                    f7:62:74:5b:0a:3f:41:2a:7e:03:13:7b:f9:47:9f:
                    ff:f9:8a:dc:c8:fd:d6:d9:c0:9c:5c:5d:5b:6c:59:
                    33:c9:1f:58:dd:70:30:5e:15:ca:9f:ec:d5:83:3a:
                    4d:29:69:1f:43:7f:d4:9e:89:3e:1c:ca:e8:8b:eb:
                    5a:cc:03:46:af:3e:af:b7:49:80:15:f5:73:4b:c4:
                    b3:ba:25:02:a3:9f:85:98:e7:11:16:af:e6:b1:a2:
                    29:e4:7b:66:26:d6:a7:91:1b:15:35:99:95:67:69:
                    2b:35:99:24:ca:ef:fa:e6:5d:82:27:10:bd:eb:02:
                    00:51:fc:27:5e:b5:79:38:9f:cb:4c:c9:72:34:c1:
                    6d:2f:49:77:df:ed:b3:ca:4e:1e:bb:d1:46:13:39:
                    d0:00:80:10:f7:72:4a:47:b6:3e:03:81:28:4e:95:
                    fa:c7:93:d7:31:de:1f:4e:33:28:79:e2:61:5b:f5:
                    1d:75:fa:25:a6:e1:47:7d:98:0a:33:b8:f3:a2:f8:
                    48:e6:37:0f:eb:1b:7c:33:d7:86:b2:87:34:44:24:
                    46:ae:e1:6e:de:22:61:77:3b:74:c5:f8:19:57:c4:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:A4:BC:30:80:D1:B4:90:D8:95:BA:31:B8:D9:60:84:A4:AE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3c6310-9358-3378-8922-9fe5e661f097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:86:91:68:82:eb:74:e9:8e:4f:2a:cc:f4:9a:e2:50:9d:
         24:e8:97:e1:30:dc:fe:fa:36:2e:95:f1:d7:76:89:b1:5c:55:
         f7:a1:6f:7f:6d:75:ae:2d:62:4c:20:03:57:4b:cc:33:fc:69:
         8a:91:8d:ec:4e:48:c2:8b:11:30:11:74:e6:57:6e:8b:c4:1c:
         ee:20:bd:9b:f2:1b:24:71:9a:32:fd:45:0d:01:e9:74:38:16:
         75:05:2f:f5:9f:c7:6c:f4:69:94:75:96:9c:e4:ad:4a:d7:fe:
         74:b7:15:21:60:04:9c:88:a9:55:af:eb:c7:33:64:7d:2d:6a:
         c3:e5:0d:6b:41:bb:54:a4:54:d8:cd:cd:e4:37:1e:9b:7e:83:
         f5:7f:d8:9b:3e:43:85:5f:06:8e:d9:2d:ec:4b:96:32:a2:94:
         be:68:e4:67:ff:c8:ae:d2:1a:09:9f:7a:eb:78:41:da:fd:45:
         95:26:db:1b:76:6c:be:8d:26:20:1b:70:8b:78:f3:2f:94:25:
         0d:78:84:e7:77:1c:ed:b0:f4:9f:f4:04:66:54:58:92:1f:40:
         97:ba:ea:6f:3d:ec:14:89:19:f7:7c:24:b4:14:4b:65:a2:13:
         22:67:58:61:bb:e0:67:ec:c2:57:f5:9d:c9:a2:cb:bc:28:8a:
         94:c1:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:07 2024 by rpki-client on console-fra.rpki-client.org