Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372a9dc1-67f8-3e0a-882a-6f95129fd9a8.roa
File:                     372a9dc1-67f8-3e0a-882a-6f95129fd9a8.roa (raw, json)
Hash identifier:          EWJJTFiRP/pW+GxGhQRgfMfAEoy7TOyrtjM2jnRnkIs=
Subject key identifier:   AD:DC:85:43:FB:1E:F5:B6:A8:8F:33:00:38:4C:48:A3:AB:28:2C:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5E3D13D453AA912001380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372a9dc1-67f8-3e0a-882a-6f95129fd9a8.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.106.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:e3:d1:3d:45:3a:a9:12:00:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=c25a46d9-22a6-471b-989e-570e5e59b264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:7b:21:81:ae:5e:92:c3:b7:f7:18:8c:dc:
                    45:7a:e0:4a:ee:af:e0:31:26:c8:ac:1c:32:ec:5e:
                    93:9e:b7:21:d2:fa:e8:b4:a7:4c:05:39:97:0b:24:
                    53:65:81:28:38:05:63:88:db:1f:68:c8:8c:02:5c:
                    ca:35:3e:b9:8b:16:84:2f:5b:35:24:93:31:ce:70:
                    d3:7d:4a:e7:a9:f9:61:7a:ef:08:a7:9a:a0:13:4a:
                    a9:7d:29:7c:10:1c:dd:f9:01:a7:67:f3:1a:b2:3c:
                    5c:16:0a:db:b0:f5:2d:7c:93:11:ec:27:4e:75:b5:
                    b5:54:86:84:8b:91:45:97:93:80:e2:ff:f2:a0:cd:
                    61:c3:b6:f1:c4:96:d8:b5:cb:51:5a:5a:7a:ae:82:
                    3b:50:2c:e2:24:68:21:46:90:79:85:e9:76:a1:ff:
                    2e:24:3c:b1:93:42:b4:1e:fe:2d:4c:9c:f7:6b:f2:
                    2c:22:73:29:4f:14:73:3b:70:e4:be:0e:42:64:72:
                    70:d0:d1:cd:9e:9c:be:de:fe:de:01:9f:0f:8e:01:
                    1a:82:44:54:dd:db:85:08:13:cb:41:e1:01:0f:0c:
                    7e:ce:14:f1:85:df:d9:f9:dc:a0:ba:04:47:68:c2:
                    a3:6f:2f:ed:59:86:52:13:19:40:fc:7d:eb:7f:08:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DC:85:43:FB:1E:F5:B6:A8:8F:33:00:38:4C:48:A3:AB:28:2C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372a9dc1-67f8-3e0a-882a-6f95129fd9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.106.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c3:41:41:72:37:36:a5:0e:ca:e7:3b:25:e7:cf:be:7a:92:
         cc:19:06:be:ab:f2:68:cb:e7:2c:7d:27:f3:af:d6:94:89:90:
         d5:f8:ae:f6:d1:34:52:31:e6:0d:fb:ba:df:33:b2:d5:d4:48:
         34:a0:e7:83:e3:b2:0d:72:74:8b:5f:96:9d:53:44:e8:c0:cc:
         4b:46:35:82:3f:9d:12:b8:30:f6:fd:73:45:f0:51:a8:c0:c6:
         e0:41:39:02:93:b9:a3:d8:02:24:b0:da:70:4a:dc:e0:47:21:
         ac:b1:ab:ec:97:8d:35:84:07:0e:60:c7:d3:98:94:80:e0:de:
         c7:6c:0b:93:1e:e7:cc:0d:bf:0a:e4:cd:2c:20:a3:6e:2f:0d:
         41:82:3b:21:ec:d7:cc:27:45:2c:35:18:3f:37:22:78:2c:16:
         39:77:a3:f9:2f:66:b7:e9:33:ae:15:49:88:ad:21:b1:c6:bb:
         4b:61:ae:e8:7d:32:06:93:94:e6:eb:2b:3a:aa:9a:fb:70:35:
         26:ff:fe:13:97:c2:a4:23:f4:e9:45:40:99:2a:92:24:7e:18:
         5f:bd:78:46:f8:96:0e:1d:29:2e:a0:a0:8e:f7:80:c3:2f:19:
         ac:b5:71:65:2c:b9:5a:9c:d1:f2:c4:81:37:eb:8f:ea:2d:54:
         e4:42:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:06:11 2024 by rpki-client on console-fra.rpki-client.org