Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb5c1e4-897b-3e55-a65a-75cba3e55077.roa
File:                     2eb5c1e4-897b-3e55-a65a-75cba3e55077.roa (raw, json)
Hash identifier:          lnHSnLEYDjlPuGEWF9FoBk6upK/BW3JuY9k3HEEwrZI=
Subject key identifier:   A9:42:9F:03:4C:2F:38:87:C8:3F:24:59:7C:C6:F7:EA:A7:D1:7B:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C714A0BE8C599D35A5310
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb5c1e4-897b-3e55-a65a-75cba3e55077.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.74.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:71:4a:0b:e8:c5:99:d3:5a:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=bfbe208a-f1f9-4ae2-80cb-78af3a9d6e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:25:11:eb:87:c3:55:70:5e:1c:ab:68:59:
                    53:c3:bc:b3:95:a1:7f:5d:32:86:a4:5f:d0:69:bd:
                    75:b7:d2:8b:be:8e:7d:63:d1:6d:54:9b:5e:26:47:
                    b6:fb:2d:13:75:73:1d:bc:58:91:28:5a:d1:18:43:
                    e2:14:6c:e1:bc:53:70:90:63:78:88:75:dd:ae:5a:
                    5c:f6:7b:ea:43:da:10:60:42:31:98:fb:79:e3:fe:
                    f4:d4:21:40:2a:7d:21:de:e8:be:55:2f:91:c2:cd:
                    37:c2:39:6b:6d:28:b9:3d:a4:3e:07:e8:bd:10:ec:
                    9a:4f:a1:5e:a5:9b:a7:11:a3:99:b4:c0:61:44:a3:
                    db:4d:c9:52:76:d7:d3:e7:cf:f9:93:d0:d4:3d:f0:
                    1d:06:ca:7d:ab:fa:b9:93:1b:48:25:d3:66:e3:fd:
                    de:d3:a8:7e:ec:98:37:b0:38:41:21:19:0d:e2:bd:
                    1d:c0:97:94:8c:f1:84:ef:4a:35:15:4e:6e:76:9e:
                    d2:f8:fd:af:d6:26:b2:1c:a8:61:ce:9c:9a:c9:f1:
                    0f:21:71:77:31:d8:93:e8:41:4c:2a:a5:37:5f:e5:
                    e9:3f:1c:97:69:ef:52:e2:ba:23:1a:53:48:9a:6f:
                    18:37:07:e5:70:99:3e:50:d7:d3:83:44:5d:9d:6c:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:9F:03:4C:2F:38:87:C8:3F:24:59:7C:C6:F7:EA:A7:D1:7B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb5c1e4-897b-3e55-a65a-75cba3e55077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:d9:28:fc:13:cd:a4:79:f6:e7:40:7d:e7:31:84:d5:83:
         bf:0f:35:5a:42:61:de:c6:76:2b:bb:8b:bb:84:0e:01:d6:da:
         4c:6d:ab:3c:fb:d8:6e:69:f6:86:1f:f3:47:25:3e:ee:40:e9:
         5d:cc:9f:05:39:c1:7c:e8:7d:49:49:90:e4:56:bd:2b:9b:76:
         f5:1e:2c:29:47:2a:75:0d:ae:bc:59:64:61:3d:2e:86:e2:e7:
         33:26:4a:bd:36:9f:ef:55:7b:8d:4e:34:04:57:be:7f:d8:95:
         8d:af:9c:a5:a9:35:b4:5c:cd:b4:fa:d5:9a:04:98:e3:6b:e4:
         da:bd:f7:6f:5d:95:f2:05:17:b7:39:57:9a:3e:92:79:cf:5a:
         42:d6:44:06:83:bf:21:72:6d:94:0f:17:dd:b8:91:59:3c:cd:
         95:03:92:15:e3:b5:85:d6:44:ca:86:b5:ce:a7:ac:c7:dc:0b:
         36:c6:ac:45:54:05:ea:91:17:5c:02:11:13:23:c1:2a:a1:d8:
         74:34:d0:35:51:58:4f:54:ff:51:79:30:64:11:17:04:5a:48:
         c8:57:64:e4:81:38:55:2b:79:42:d8:81:76:42:61:54:bd:eb:
         32:1c:72:d5:b1:a3:53:54:24:ba:61:3e:9b:d8:2d:50:a7:c7:
         42:94:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:46 2024 by rpki-client on console-fra.rpki-client.org