Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e05ebdb-6d1c-3aa8-aa11-776282d9f597.roa
File:                     2e05ebdb-6d1c-3aa8-aa11-776282d9f597.roa (raw, json)
Hash identifier:          Bnp0rrvolxJeFXNDk5pfpu2GeMcY7Wtu7IwCuFhULKw=
Subject key identifier:   36:D0:9C:CA:86:12:66:39:61:BD:AD:CC:E9:08:77:20:18:EF:45:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89292174FA8FFB882AE3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e05ebdb-6d1c-3aa8-aa11-776282d9f597.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.226.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:29:21:74:fa:8f:fb:88:2a:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=b6bc7cc8-0198-4690-8922-b4fa85bd36e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:b7:66:13:55:c6:fd:90:df:6a:9b:ca:89:
                    ba:43:61:16:e9:ce:26:25:42:72:a4:6c:ff:8f:06:
                    96:38:a6:c5:89:d4:c5:a5:83:62:e8:c9:e2:d9:e2:
                    42:d5:9f:db:ca:1f:21:9f:62:72:2c:dc:d8:dc:d2:
                    5b:41:45:e3:9e:e1:ce:7b:7f:d1:14:e1:e2:19:e1:
                    52:cb:e0:3d:12:81:4c:75:4b:f3:fb:58:6a:12:07:
                    81:77:08:5b:9e:c2:6d:e5:57:54:fa:45:54:b5:7b:
                    98:43:fb:1b:c3:c4:df:ce:40:a7:da:14:32:ec:16:
                    c6:93:cb:ef:c9:10:43:03:36:9c:d9:28:d7:a0:06:
                    56:7d:a3:15:b7:5e:c7:42:f6:2f:bc:8e:b8:4b:6f:
                    75:df:86:cd:af:14:b4:d3:bc:3d:0d:71:da:15:b8:
                    44:de:f1:95:a4:14:b7:e5:95:6b:86:92:d0:e6:88:
                    c2:02:0b:eb:53:11:0d:53:79:8a:89:24:a7:93:4c:
                    0a:d5:19:b3:cc:d8:b9:fe:87:ce:78:9e:18:57:11:
                    9b:73:4e:d9:65:d6:e7:b3:ff:fb:e1:26:48:fb:21:
                    8c:96:ee:e5:86:f7:ef:ba:1c:f8:ee:f6:8b:0a:6e:
                    de:6f:b3:b7:22:f7:da:52:98:57:25:c2:0b:ff:24:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:9C:CA:86:12:66:39:61:BD:AD:CC:E9:08:77:20:18:EF:45:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e05ebdb-6d1c-3aa8-aa11-776282d9f597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:37:77:fd:02:2f:d1:14:39:f5:cd:66:1e:39:6f:f0:09:
         e1:be:d0:00:5f:21:0f:65:45:de:b4:92:79:82:06:12:5d:09:
         54:8f:0e:95:91:49:b1:e8:79:7a:12:fd:3e:ad:2f:2c:73:a7:
         56:a6:86:a6:83:ec:d6:66:bf:bc:c6:ef:4f:b0:8e:9b:6c:5e:
         f9:1b:5f:d1:81:48:af:6b:58:41:c9:bb:d3:c3:d9:eb:fb:7a:
         d8:56:ec:cf:1b:5f:22:52:53:29:af:79:c9:54:d8:d3:2d:b4:
         e4:49:f1:29:06:5e:c8:08:8c:c2:f6:f0:31:e5:c2:0f:9c:32:
         56:9c:3d:6e:dc:9b:f4:69:dc:2f:21:25:f2:78:55:eb:25:07:
         3e:0b:e2:f0:76:14:da:d1:4b:ef:a3:1d:fb:21:b8:f6:3e:c0:
         20:78:27:b6:03:f0:52:f0:9f:63:fe:6a:c2:d2:35:c7:1f:61:
         37:06:21:f4:f8:67:e1:7d:2a:01:85:3f:e2:40:7e:a4:da:4c:
         e4:4b:83:2e:01:9d:77:aa:6c:a2:57:5e:3c:22:d2:ba:53:de:
         e6:71:f1:e3:f1:96:17:80:81:c7:65:b1:da:1c:84:1a:00:e9:
         fc:ce:c5:12:96:50:07:c5:cc:a8:7b:aa:e7:c5:c8:af:dc:bd:
         7a:7b:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:15:16 2024 by rpki-client on console-ams.rpki-client.org