Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8be23a-2589-3845-99ba-77473fd23c24.roa
File:                     2c8be23a-2589-3845-99ba-77473fd23c24.roa (raw, json)
Hash identifier:          ORD3TYEmfxiAl8xRCxh6rMvbHOH+W5CWHtOmMPj0/m4=
Subject key identifier:   22:B5:FD:21:97:B8:BB:05:77:66:63:48:C5:8B:ED:22:D9:55:6B:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E95C17B790692E56A7200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8be23a-2589-3845-99ba-77473fd23c24.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.199.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:95:c1:7b:79:06:92:e5:6a:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=bc06ded6-2872-42de-a897-922389836206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:89:65:e1:c9:78:08:25:0a:9f:79:2e:52:
                    0c:a5:b7:07:4a:03:18:3a:8d:35:53:fd:fe:f1:aa:
                    37:9d:16:fe:4e:44:93:33:3c:61:d6:a3:b9:30:2d:
                    03:b3:f2:73:4e:89:f0:11:0a:8e:9e:a4:66:ed:d2:
                    db:f8:fe:04:d8:46:cb:13:6f:59:ac:a0:98:44:95:
                    ac:c4:05:74:b4:fd:a2:12:c6:06:27:ab:0f:76:95:
                    e7:4d:e2:31:1b:28:c8:77:3c:f9:cc:04:d7:c7:0f:
                    02:d1:52:f4:ce:7c:11:be:ff:52:83:24:c4:e5:14:
                    15:9a:4c:41:52:f5:2c:a9:83:7e:44:50:c6:57:04:
                    23:66:91:02:48:94:69:5d:ff:e2:4e:68:1a:4a:dc:
                    0b:aa:52:8a:47:77:15:c2:96:09:31:cb:84:0e:9d:
                    21:33:8e:5d:da:4b:8d:fa:01:60:7a:63:16:8b:08:
                    2e:74:55:61:f5:5f:65:bb:67:97:29:99:42:a7:87:
                    44:5e:a4:43:90:af:04:5c:70:aa:53:3b:a1:c6:49:
                    35:3a:1c:6e:62:64:ae:24:84:99:a7:da:72:0e:0e:
                    af:22:b6:c1:1b:c3:32:c5:90:97:0e:bb:ae:1b:ec:
                    13:42:27:7a:49:73:6d:19:63:16:1e:13:8b:d6:57:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:FD:21:97:B8:BB:05:77:66:63:48:C5:8B:ED:22:D9:55:6B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8be23a-2589-3845-99ba-77473fd23c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:61:dd:03:2d:2e:27:cd:12:64:9e:ec:53:38:69:66:a2:
         ee:92:0c:cd:77:cf:91:f0:c8:3e:6a:ee:30:eb:0f:0c:5e:0b:
         db:a3:b5:28:6b:6a:3d:1a:43:86:06:cf:38:db:91:50:f5:72:
         7a:d1:59:70:e2:45:2f:2e:78:6e:d6:74:dc:11:4b:71:1a:a6:
         0e:68:7b:e4:64:c5:df:8f:c8:34:69:cd:94:fc:f7:78:26:ae:
         db:5d:35:a8:54:60:9e:e3:a4:24:b5:7e:6c:97:c1:8c:c6:82:
         3f:88:a1:8b:0e:ea:4b:12:4d:ad:44:16:67:e3:77:ec:f6:db:
         36:23:02:81:84:60:59:b9:58:fa:3c:6a:60:bd:54:4e:13:ae:
         a3:15:cf:fe:fc:19:8c:07:2c:5e:0d:8d:32:70:a2:1e:03:6f:
         3b:ab:fb:01:8e:a0:ef:9f:5d:33:14:d8:32:cd:dc:1c:5c:01:
         54:33:3b:cc:41:80:65:24:3a:c8:c0:b0:de:0a:c6:f1:fc:de:
         e6:7e:dc:77:e8:15:28:dc:28:7a:99:a6:b4:cb:7e:69:18:2d:
         48:73:cb:bc:4b:fe:b7:57:3e:46:38:a8:fb:aa:89:e1:27:29:
         6b:e9:47:31:79:a5:68:7f:ea:44:8c:26:5b:84:ad:28:df:5b:
         e5:06:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:52 2024 by rpki-client on console-ams.rpki-client.org