Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485cdba5-c218-3fbd-aaac-694641d95544.roa
File:                     485cdba5-c218-3fbd-aaac-694641d95544.roa (raw, json)
Hash identifier:          Yc6BU5yN6wnBm8qA5zCFxylMH8iQpgM7XkrhpsXf3pc=
Subject key identifier:   9C:8B:B9:93:D5:A4:7C:7C:A9:A8:45:F6:CD:14:6B:9C:61:A0:E4:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7143E27BBF8D04497C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485cdba5-c218-3fbd-aaac-694641d95544.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.60.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:14:3e:27:bb:f8:d0:44:97:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=95b59156-a78c-417b-957c-37afd5ebe9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:80:67:0a:59:97:dc:a2:71:c4:f5:2e:28:
                    4c:86:ee:12:95:bd:ce:3e:70:9a:13:4e:93:e3:cd:
                    a3:bb:91:2e:d3:c0:62:f5:88:91:6a:72:83:19:77:
                    bc:9e:a8:de:11:b1:d0:be:8a:21:ee:08:e6:d5:0f:
                    c9:88:ca:89:d2:a1:d4:f9:e2:0e:47:b9:e8:48:9a:
                    3e:54:c4:45:8d:e5:8f:51:0b:9f:ab:cf:8d:72:5e:
                    ec:1d:19:ac:67:02:9e:23:bf:44:cd:91:ab:b6:3a:
                    17:b6:cb:10:1f:f0:5c:d5:9c:d4:65:11:f4:f4:69:
                    f4:27:18:b5:f7:c8:70:bf:72:af:15:21:e2:ae:9d:
                    9e:a3:0b:84:15:ac:e2:7d:76:9b:58:25:2d:ff:ec:
                    b8:1f:3d:19:50:83:21:77:14:9e:03:7c:8b:8f:53:
                    56:37:9f:53:a4:53:34:18:9b:1c:04:37:58:1d:96:
                    07:49:78:b6:85:41:9a:0d:83:b5:3e:ab:8b:5c:53:
                    26:b9:09:92:be:bf:6a:9d:19:46:7d:31:33:b3:81:
                    a6:44:91:1c:2d:8d:6f:32:dd:f3:f8:c7:a7:2f:06:
                    d0:ac:1b:5c:fa:f8:cd:0f:d0:df:ac:3a:2a:49:89:
                    41:f5:20:74:70:57:ad:7c:c2:b9:22:cd:89:87:f7:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:B9:93:D5:A4:7C:7C:A9:A8:45:F6:CD:14:6B:9C:61:A0:E4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/485cdba5-c218-3fbd-aaac-694641d95544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.60.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:0e:1d:0a:e3:c1:ab:2b:03:f6:a9:c0:c4:3e:e7:f6:c4:52:
         f6:9e:5a:d1:0c:56:31:1d:5b:36:bc:85:b1:fe:20:75:ab:a4:
         e4:2a:15:3d:d6:36:4d:77:17:59:d8:09:0c:a1:e4:5e:88:1b:
         d9:94:9d:0a:0e:92:e9:df:13:a6:56:5b:a2:72:e6:7a:05:3c:
         0c:c9:ec:ff:83:b2:04:e4:29:51:33:18:ee:c7:cc:e7:ae:67:
         07:9f:2d:d6:44:6c:e9:19:7b:f0:e9:43:78:07:52:55:3c:13:
         ed:00:44:ae:68:89:66:a8:6e:ba:6b:d2:fa:76:c3:d0:c2:ae:
         e5:00:9c:67:40:77:f2:f5:f8:7f:86:61:8b:89:82:29:58:f5:
         f5:3e:28:9f:04:6d:7d:3d:2f:29:9e:a6:68:80:dc:14:a4:67:
         76:4b:03:ec:f1:a0:a5:78:d2:6d:07:63:12:0b:d8:d2:20:d5:
         c5:1d:cc:6e:4f:83:14:05:0c:99:a7:42:a6:da:53:4e:e9:d2:
         2e:52:ff:56:a7:f3:1d:4c:5f:8a:59:22:27:06:bf:82:49:40:
         41:1e:a9:eb:da:7c:12:b8:ec:50:6e:a6:37:cc:c8:2b:4d:1f:
         e6:be:1f:4c:a6:b8:56:64:f4:f4:2c:6b:f8:db:3b:ed:9f:5e:
         cc:aa:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:23:55 2024 by rpki-client on console-fra.rpki-client.org