Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3454df88-7f8f-30e7-8d5e-7fb1d30a73b7.roa
File:                     3454df88-7f8f-30e7-8d5e-7fb1d30a73b7.roa (raw, json)
Hash identifier:          Uj7G2jcdkuHyXYfeRBysDgSM+5KTdZVv0k2UAQCOASM=
Subject key identifier:   D1:FF:BC:E5:8C:6A:C3:3A:0F:74:E1:56:00:2C:3E:90:45:88:04:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C816955B51105DA58CA6F2
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3454df88-7f8f-30e7-8d5e-7fb1d30a73b7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        73.232.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:16:95:5b:51:10:5d:a5:8c:a6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=03ac11f3-20a2-4750-9c07-2937a9e51a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:4a:f3:b9:b3:ca:2d:4d:7e:f6:7d:3a:7d:
                    29:5f:b3:1c:7f:b9:28:6a:04:7d:4c:e7:c8:14:ae:
                    46:df:86:97:81:ff:fd:0d:95:80:6e:c3:ad:5d:07:
                    c5:fa:71:ae:9e:df:43:ff:84:0b:6c:bd:40:96:de:
                    a8:7f:1d:a9:ad:1a:c5:ec:63:a7:dc:08:50:0f:b8:
                    84:7c:84:09:fd:dc:a6:aa:6e:2c:50:d2:ac:1e:bd:
                    ef:02:9b:7a:59:53:44:bb:30:f0:ac:7c:df:0a:8e:
                    46:5d:06:c4:1b:23:73:e4:49:82:45:ad:6f:d0:31:
                    57:e1:dd:51:ec:da:74:95:c0:da:90:90:8b:26:22:
                    c6:36:d2:33:09:85:66:c7:2a:6b:83:e4:d3:d2:b8:
                    9c:2d:df:27:06:ea:f3:c5:a6:e9:51:4f:c6:4d:6b:
                    2a:33:54:b7:a6:6f:33:af:34:f3:15:24:80:8d:6c:
                    ef:44:b5:38:1e:e4:e2:a5:8e:bf:fc:b2:1c:94:d3:
                    1e:87:8f:3c:d7:79:5b:18:1c:cb:9b:71:2d:78:7d:
                    84:0b:02:34:62:7a:f9:9e:28:63:85:ff:42:75:b9:
                    d7:45:f4:86:12:2c:1d:1b:7f:b9:34:24:15:9a:54:
                    d7:6f:95:0a:ff:2a:c9:98:59:e2:2c:e4:81:25:53:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:BC:E5:8C:6A:C3:3A:0F:74:E1:56:00:2C:3E:90:45:88:04:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3454df88-7f8f-30e7-8d5e-7fb1d30a73b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.232.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:fb:a7:80:38:2b:b3:06:a5:9f:0b:82:52:3e:e4:da:bf:14:
         be:9f:b1:61:b5:97:08:db:e9:96:07:0a:c3:3a:16:87:cf:a5:
         81:70:99:cc:da:61:dd:e9:04:bc:63:b1:49:97:7b:f0:78:d1:
         aa:a8:c6:ec:c5:7c:a3:d8:55:b2:da:91:d0:db:27:b9:9c:ca:
         48:3f:26:9a:ff:c6:b8:5b:5b:cb:5b:7f:53:6d:c4:43:67:42:
         c9:4c:16:42:4c:b1:2d:f4:2a:44:b9:61:f4:bb:0c:49:f1:c6:
         0c:f9:74:4e:1c:0c:78:f4:79:c6:bd:c2:bf:1d:0e:ea:5a:52:
         34:40:56:d4:4e:95:cc:3d:c6:da:46:91:35:6f:4f:cb:17:7b:
         44:9f:b4:02:e2:1d:75:e2:46:e2:6d:96:c5:1f:dc:92:8d:e8:
         ef:23:28:0a:49:b6:82:5e:1f:cb:d4:66:02:30:a1:2f:82:1b:
         56:6a:61:dc:d5:d7:39:bc:5c:fa:ba:0c:d0:7a:da:ea:ab:a8:
         49:10:49:9c:91:0e:91:2f:b7:3a:43:67:7a:f0:8a:41:33:83:
         b6:e1:d7:6b:d9:49:b7:23:f7:f8:44:ac:95:81:57:e6:8d:09:
         fa:8a:03:70:3e:0b:a0:31:c2:66:38:a6:ee:eb:8c:25:86:cb:
         12:4d:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:33:17 2024 by rpki-client on console-fra.rpki-client.org