Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3904872a-2e47-3e56-9bd1-485b5b4e4469.roa
File:                     3904872a-2e47-3e56-9bd1-485b5b4e4469.roa (raw, json)
Hash identifier:          N5ja1XFfhcXozb2LqtPNiEwI8z7g0i2FMTdjlFef2b4=
Subject key identifier:   F0:88:99:07:FB:F7:F3:69:12:3C:7A:23:85:C8:2D:6D:68:72:CB:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C41E91E405EC3D887D100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3904872a-2e47-3e56-9bd1-485b5b4e4469.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.246.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:41:e9:1e:40:5e:c3:d8:87:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d27f4404-f449-4684-859b-c081a28abfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:64:f1:9a:26:f6:c3:f5:5a:5d:f7:cd:d1:28:
                    01:49:f5:05:68:cb:46:6a:d1:1f:6e:89:d1:21:d4:
                    9a:f7:09:10:7d:5f:fe:2d:68:0a:91:c6:99:2f:45:
                    db:71:09:2d:46:45:97:5e:de:18:d5:1a:fa:2b:fd:
                    6b:e1:2a:05:03:bb:21:9d:e2:3e:e5:48:40:20:e2:
                    07:7b:c6:39:6a:65:ee:9f:9f:aa:a7:e5:35:82:00:
                    44:34:11:68:87:50:7b:56:25:d0:9b:c8:f0:81:6c:
                    cf:93:55:cc:1e:79:29:5e:7a:d2:00:f3:bd:dd:b9:
                    67:d8:bc:c2:b7:6f:a4:64:f5:60:ee:c6:08:2c:f8:
                    7a:66:57:b7:17:87:a8:c7:79:c8:e6:3b:69:38:0f:
                    74:6a:bc:90:5e:3a:42:22:af:88:3e:72:3c:4d:93:
                    86:2c:e3:b9:8b:54:4f:05:12:52:07:a7:5b:af:73:
                    c3:d3:03:76:34:bf:89:7e:5f:87:f6:fb:8a:49:d5:
                    3e:88:1f:f8:26:24:35:2a:bb:df:3a:bd:25:fa:d0:
                    19:cc:77:10:b4:dd:a3:18:c4:97:f9:ab:04:c2:c8:
                    63:2d:72:44:57:cb:01:a6:33:12:57:49:0a:63:6d:
                    c6:5a:8c:22:f1:f6:c6:28:3f:dd:2a:24:41:e4:d0:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:99:07:FB:F7:F3:69:12:3C:7A:23:85:C8:2D:6D:68:72:CB:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3904872a-2e47-3e56-9bd1-485b5b4e4469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:67:94:90:02:ff:6e:d7:97:55:50:a2:89:39:bc:87:6b:26:
         15:56:28:eb:b9:3b:9d:31:e8:85:47:91:cc:d9:8b:4e:c3:c3:
         c8:e8:62:1c:ae:40:76:dc:03:51:bb:0e:11:a9:49:37:0e:2a:
         61:0b:e2:7a:17:2a:e0:6a:dd:b4:bf:0c:d7:e7:82:b0:0a:da:
         20:64:c9:f0:fe:63:14:08:68:9c:fb:cf:2d:96:b9:16:90:a8:
         fb:9e:59:c1:7e:b3:6a:94:dd:de:4a:13:7c:85:7e:58:83:4e:
         22:6a:f9:c0:d3:d4:8f:76:70:d7:52:dd:40:d7:e0:6e:1f:61:
         a4:f0:8e:a9:89:de:2f:44:c6:e1:b3:b4:5d:8a:d1:a9:9e:46:
         31:59:2c:c6:bf:90:0b:fc:08:82:bd:a1:87:41:db:2a:34:5a:
         dd:d2:31:92:e0:d4:71:3c:fd:4b:01:bc:32:dd:39:37:4a:7f:
         9b:55:5a:7a:4b:c6:11:06:8a:c0:a7:19:34:b0:c3:fd:32:e6:
         aa:b0:08:bf:37:20:bd:ca:6e:72:a6:e9:c6:00:d7:8d:60:68:
         06:55:42:38:da:3b:d8:5b:2b:a5:42:86:41:b1:34:ef:fd:a0:
         2a:f8:1b:d3:09:e1:15:be:85:7a:13:7d:51:70:34:74:d1:8e:
         f3:cb:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:52:39 2024 by rpki-client on console-ams.rpki-client.org