Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/413cdc97-f862-3107-87c1-edc6532a8852.roa
File:                     413cdc97-f862-3107-87c1-edc6532a8852.roa (raw, json)
Hash identifier:          yDy1kEn06xKZej5WWuVBFqn4UmAFUWF87jZqnSVHjD4=
Subject key identifier:   61:D4:84:F2:16:06:F0:70:0D:20:7E:B5:1E:A2:A9:7E:71:8C:31:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C6818D1DF3205BA760500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/413cdc97-f862-3107-87c1-edc6532a8852.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.72.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:68:18:d1:df:32:05:ba:76:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9da08aed-3463-4436-949f-06aee7b20b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:85:ef:bb:d6:ea:2f:fd:23:01:10:e1:1e:
                    a5:c5:31:76:f5:d1:de:96:39:5f:ef:6e:f7:1a:60:
                    b4:de:cd:bb:6c:ad:01:32:75:76:80:71:29:70:a1:
                    51:ad:71:b6:59:78:78:77:3e:c2:10:7d:fd:db:cb:
                    f2:2e:b1:75:75:94:6a:e4:fe:a1:7a:cc:a9:7f:c0:
                    0d:f7:53:02:6e:50:3d:f0:43:3c:75:c3:d5:c3:ca:
                    7d:b8:9d:d7:d7:77:37:56:92:34:a3:cd:65:8b:28:
                    31:b1:80:9f:ac:c9:ca:a8:b9:d7:d6:05:8b:d1:2a:
                    65:64:47:0b:cc:df:9d:6d:01:98:ca:3a:08:58:0e:
                    ea:bb:80:b2:51:00:11:1f:ee:f8:22:da:4f:f3:c7:
                    e2:ad:1f:0e:f7:22:f0:29:88:c3:86:69:b8:c9:65:
                    c1:de:7c:a1:0b:3a:cf:b6:f7:bf:0f:7e:4a:07:dd:
                    04:3a:da:98:0e:60:9d:ff:fa:fd:0d:98:08:05:0a:
                    83:4d:b2:11:ad:09:d6:32:63:a8:50:ee:98:b1:2f:
                    36:85:12:00:bb:fa:07:a8:1d:d5:63:fa:b1:e0:11:
                    00:d8:0e:4c:b4:7f:1b:76:aa:d3:73:a4:ef:03:0f:
                    78:4f:a5:7d:91:d6:25:71:4a:9e:85:ce:f0:65:a7:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:84:F2:16:06:F0:70:0D:20:7E:B5:1E:A2:A9:7E:71:8C:31:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/413cdc97-f862-3107-87c1-edc6532a8852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.72.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:ce:da:c8:3f:0e:c1:ed:e0:1b:9f:2f:72:41:44:c7:2c:
         a1:cf:0e:48:9a:91:39:0a:46:2d:fe:dc:2e:14:ca:07:5f:f0:
         5e:95:37:03:91:cf:28:7c:07:3b:e0:52:c6:b8:dc:ce:08:9a:
         fc:2c:59:f3:04:c5:82:63:a3:44:2e:b7:c9:4d:98:6a:8d:91:
         a9:db:64:28:13:9b:32:10:77:57:15:e6:4c:28:f4:98:e5:20:
         e8:56:7a:7d:b1:81:29:0f:fa:c9:45:9f:87:20:76:b5:1f:61:
         bb:04:a5:96:a6:fa:d1:08:22:6e:7b:04:11:bb:65:6d:0e:d0:
         1d:64:56:c5:64:9b:f3:ef:3c:35:4e:52:36:53:cc:72:fe:84:
         a2:b3:34:54:76:33:0b:15:0a:f0:cd:3a:c1:75:d9:06:59:c4:
         a5:2d:48:ce:3c:82:0f:d8:02:75:be:40:44:7a:fd:9f:4a:4a:
         62:ea:47:fc:3e:17:98:95:1f:13:77:be:cb:26:f4:a9:d1:f3:
         f1:86:6e:46:30:1d:5d:9e:95:61:74:d4:61:db:4b:96:45:54:
         73:85:29:d4:50:42:3a:86:df:11:5f:7f:af:39:50:44:f5:ae:
         6d:83:31:99:d7:68:55:d5:eb:8e:36:ef:17:e3:46:41:01:a9:
         8f:8f:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:07:57 2024 by rpki-client on console-fra.rpki-client.org