Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33093891-c595-3203-859a-d887c4aea97e.roa
File:                     33093891-c595-3203-859a-d887c4aea97e.roa (raw, json)
Hash identifier:          bJDkSjiVoHb6KxVn5iMTslGFSfFDAVYMcGcXeXyAW6s=
Subject key identifier:   78:D1:72:29:23:2C:C4:D5:15:4C:27:05:33:A1:C6:DB:04:AE:9B:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7C9AC46DCA553790D6A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33093891-c595-3203-859a-d887c4aea97e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.190.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:c9:ac:46:dc:a5:53:79:0d:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2b175d82-8fb5-4013-9cff-244f5f5d6e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:49:45:48:c7:92:e3:87:59:8f:68:44:f0:
                    35:31:eb:5a:ad:56:1c:d1:f3:4a:7c:d7:bb:f5:fa:
                    16:c7:0e:22:ed:8f:b7:0d:7e:82:16:08:78:c8:82:
                    7b:f1:a3:1f:01:02:b5:e7:b7:aa:b5:0b:7b:af:69:
                    b4:93:9e:5a:5e:44:fc:ba:c2:85:a3:39:d9:b3:af:
                    ea:ff:03:fe:ff:31:41:86:dd:ec:0d:b1:2b:e4:44:
                    1e:37:ba:59:81:88:b7:29:8b:58:74:19:03:24:05:
                    31:73:35:3c:f8:f0:25:7c:c2:11:a9:5d:12:9e:e5:
                    b4:b6:dc:a4:63:7a:7c:18:ef:2b:61:7f:ac:9c:ae:
                    51:10:20:9f:ad:12:42:3a:aa:e6:86:d8:0d:49:52:
                    19:00:ba:8b:44:55:9f:86:a3:83:c9:14:f0:e9:bf:
                    10:0b:7e:83:8a:0f:cc:f3:fd:69:e6:f9:7d:5f:99:
                    55:37:b0:15:e0:4b:e7:53:07:43:55:4e:c9:2d:2b:
                    44:d2:ca:14:a3:53:43:9f:35:82:bc:09:d8:02:90:
                    92:33:b9:98:84:3b:f2:1a:fd:fe:39:c7:ae:65:a6:
                    a7:ba:6f:42:29:bc:a3:ee:69:3f:ea:4e:25:44:55:
                    6e:ec:db:60:b8:12:6b:54:59:87:7d:0d:f3:b8:41:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D1:72:29:23:2C:C4:D5:15:4C:27:05:33:A1:C6:DB:04:AE:9B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33093891-c595-3203-859a-d887c4aea97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.190.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:14:ec:32:72:b0:58:b8:f7:23:b2:10:49:6d:a9:45:fa:63:
         f6:96:ea:98:cd:89:cb:79:7b:75:54:a7:6f:8b:78:87:2d:7c:
         3a:6a:90:59:fc:14:0d:77:33:0f:bc:53:97:20:42:bb:65:70:
         fb:23:31:8e:49:19:17:c2:de:cd:a6:60:e3:53:81:0d:a3:5a:
         fb:f6:dd:99:c3:6d:7e:a5:75:3c:ed:d6:63:f9:39:f6:6b:94:
         90:eb:91:75:dc:98:31:99:2f:96:1a:73:93:b6:e9:c2:64:95:
         e9:ef:15:3f:b1:46:2e:2b:9c:bd:db:b2:a4:e7:ba:30:d8:35:
         ac:85:d1:ac:f4:3b:cd:db:93:2c:1d:db:65:60:ab:b1:d8:3a:
         b3:24:75:4b:5b:aa:66:5c:a9:05:d0:7b:12:0b:ec:58:34:61:
         d6:37:9f:25:7f:36:69:12:76:19:8f:fd:36:bb:b7:46:05:64:
         a2:35:3e:b6:08:db:bf:0e:e4:5e:ac:06:92:67:94:ab:8d:ae:
         53:b5:c9:2e:58:12:e3:57:48:90:0d:b1:d5:a2:69:c3:a5:91:
         bb:ac:27:7e:9f:da:03:b5:0b:59:31:35:a0:2d:33:ba:25:72:
         96:0f:fd:96:ee:2a:b2:fa:aa:31:8c:5b:4c:bb:b8:1b:b6:c5:
         72:3d:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:00:45 2024 by rpki-client on console-ams.rpki-client.org