Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40b1a788-d14b-39f3-a035-377ec7d04feb.roa
File:                     40b1a788-d14b-39f3-a035-377ec7d04feb.roa (raw, json)
Hash identifier:          wxDMSZ/f3ArAPkqE40z9K51QlR5Sifd3CJevfUtpj4M=
Subject key identifier:   CB:E4:3F:AE:6B:A3:BC:54:E7:DE:89:45:11:28:54:7B:84:29:59:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D2B6E5D8A43086D176CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40b1a788-d14b-39f3-a035-377ec7d04feb.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.162.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:2b:6e:5d:8a:43:08:6d:17:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c0338e73-9b5c-41f3-9f8c-828d74a10d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:da:cb:9c:8f:48:aa:85:7a:48:b3:f5:3e:
                    b2:eb:51:54:85:dc:85:05:49:ea:5e:58:db:89:22:
                    e0:51:02:0d:a9:7e:e5:b1:23:e1:b8:bb:0f:81:cc:
                    0e:ba:16:19:2b:eb:67:b7:5c:50:72:7d:28:2d:85:
                    28:9f:48:76:dc:80:e6:72:b1:c6:9e:79:04:db:ba:
                    2e:3f:e4:b2:67:a6:87:45:e6:2b:6e:58:87:0b:ea:
                    53:5a:bb:6d:36:af:60:90:48:b8:07:c8:e5:f7:77:
                    67:79:34:dd:1a:96:ca:80:2f:eb:44:b9:5a:ee:37:
                    76:73:2b:3f:25:f9:6c:0a:af:87:88:e2:94:7f:67:
                    71:62:19:1d:5c:87:9a:09:78:fe:e8:03:65:34:91:
                    33:1a:bd:22:cb:bf:55:40:b4:27:cd:f8:81:2c:02:
                    b4:27:69:13:5f:bc:62:16:73:10:00:d5:0f:17:8e:
                    88:c9:25:6b:e3:33:74:fe:dc:01:81:79:47:2e:ea:
                    5d:41:f7:75:0f:bc:27:a9:6b:d1:92:28:79:6d:fb:
                    6e:67:ea:3c:5b:e8:82:af:24:85:bb:0c:ab:57:25:
                    1b:2c:87:34:0f:10:c4:cf:70:c6:c0:5f:b3:1a:f7:
                    5a:f5:f0:ab:e4:27:35:32:b9:ce:3b:ec:f0:8b:39:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E4:3F:AE:6B:A3:BC:54:E7:DE:89:45:11:28:54:7B:84:29:59:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40b1a788-d14b-39f3-a035-377ec7d04feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.162.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:a5:79:39:95:22:f0:05:e5:89:8a:01:db:b5:01:17:9c:
         a5:51:cf:85:07:fe:57:2e:f6:04:73:cc:66:43:52:86:dd:d3:
         aa:c0:0b:c0:1f:dc:ad:3e:35:30:6b:f2:37:90:cc:ba:66:a2:
         b1:40:93:b5:17:7d:c6:5a:b5:da:80:55:41:09:15:7a:02:f9:
         b4:b8:ae:f7:4b:99:62:e1:52:cc:1a:67:cc:c5:54:b7:f2:1f:
         65:e0:32:91:82:08:f0:56:97:e9:22:b6:75:7d:51:b0:8a:c7:
         a1:14:33:95:67:a7:7b:65:73:23:e4:0a:ac:9b:f6:02:9a:d5:
         52:3c:a9:9c:99:b0:be:09:39:d3:99:b2:53:fa:b6:54:a3:52:
         ce:8d:27:de:8c:de:68:8a:51:2f:3b:54:1e:90:5f:3b:0d:3d:
         3c:81:22:03:6a:5e:98:74:02:92:58:08:d7:a1:86:05:a8:df:
         2d:62:3b:d6:38:0c:2c:73:44:a9:fa:6e:d9:dd:a5:f9:56:c9:
         e5:04:64:a3:cd:39:f6:3c:84:a2:50:95:b1:27:ec:13:37:5c:
         88:7a:63:3c:a0:33:0d:97:8d:84:d9:a8:9c:41:3c:7c:ef:f5:
         2b:c9:33:5b:a9:69:e6:1b:ba:88:fb:60:ad:9a:49:25:52:6b:
         b1:84:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:23:14 2024 by rpki-client on console-fra.rpki-client.org