Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd4ce21-48a5-3efa-8db1-0a5e39004465.roa
File:                     4bd4ce21-48a5-3efa-8db1-0a5e39004465.roa (raw, json)
Hash identifier:          QuOqZAJP1YZY/oU33HvDlyliopTDfwKqbY1kDntYppM=
Subject key identifier:   AC:15:9F:AB:F1:34:7A:08:E7:37:62:74:49:D5:52:24:8C:7C:68:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5F260B1642618CE1AFB20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd4ce21-48a5-3efa-8db1-0a5e39004465.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:f2:60:b1:64:26:18:ce:1a:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=32336e76-7f82-4788-a945-2679cd61d8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:80:cf:94:27:04:5a:4f:47:c7:78:79:58:
                    36:ba:eb:29:da:44:bf:02:0d:08:62:e0:8a:61:cb:
                    33:00:ba:45:6d:59:e8:fe:0e:28:ec:68:58:75:af:
                    86:79:75:7b:09:85:dd:3d:15:73:25:08:d4:f7:6d:
                    65:2c:54:d3:a0:71:0a:17:3e:24:13:8b:f7:ae:ba:
                    76:c6:33:d7:83:72:89:a4:55:c1:d6:a1:18:be:0d:
                    91:a1:47:eb:29:67:28:b9:b3:b9:15:9e:3e:55:85:
                    36:f0:6d:f2:09:16:cd:c6:1c:aa:57:45:92:fa:c4:
                    db:84:a5:a4:36:a6:76:c9:81:f6:19:c6:a1:62:eb:
                    48:56:f4:e0:e2:6d:c0:03:62:8e:b5:e8:00:d8:15:
                    20:34:99:0e:f6:13:62:2a:e7:9a:52:52:cb:a0:6b:
                    ff:9f:7b:0b:76:50:36:ad:ba:a4:1e:e0:04:30:ee:
                    cb:ec:c4:7d:5c:73:f3:72:4b:ee:78:4a:ef:8d:46:
                    b7:e7:da:19:00:57:89:1b:a4:01:71:aa:b7:6c:34:
                    8b:ea:c8:ab:ba:e3:90:26:12:68:3e:19:9d:9b:c1:
                    3c:42:8e:e1:ec:81:e0:bb:0f:28:9d:69:1a:8e:08:
                    df:43:42:aa:81:82:49:8c:0b:31:a2:93:1e:86:45:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:15:9F:AB:F1:34:7A:08:E7:37:62:74:49:D5:52:24:8C:7C:68:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd4ce21-48a5-3efa-8db1-0a5e39004465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:00:1a:5e:d6:e4:0a:ff:67:38:8c:07:ab:a0:74:b5:75:a5:
         0c:84:8f:71:8c:0a:00:4e:34:95:2f:ad:12:dc:fe:aa:4c:c1:
         85:97:49:e5:2f:8b:2c:4a:57:d4:5e:cc:45:e0:a9:63:39:ed:
         1f:07:f7:8a:40:c8:7f:fc:8c:e5:64:e3:5e:32:45:b4:c4:cc:
         7c:f3:ea:4b:4a:30:7b:10:c6:51:18:4d:8f:7e:73:0c:d0:07:
         7e:a1:23:35:c2:21:7e:54:79:ca:fe:41:51:75:21:7f:0e:04:
         9e:52:95:28:99:9d:f5:bf:19:f9:0a:9a:ff:e8:5f:02:d0:d4:
         25:6e:99:e2:27:e7:70:b8:47:77:24:20:49:af:d9:ce:4d:38:
         cb:0a:78:da:e6:3e:b5:14:f1:16:27:b2:e1:98:c4:05:99:0e:
         18:89:88:3f:f4:9a:c9:07:0b:64:67:8c:0a:de:40:b3:f3:cb:
         cb:ec:75:bd:49:2e:1e:57:65:9a:9e:fb:6e:32:61:76:bb:bf:
         77:4a:20:22:60:a1:fe:bc:43:0d:99:3b:e5:ac:c4:25:15:d9:
         f6:e5:e9:29:a4:c9:8d:7d:4b:1f:76:94:10:d3:2c:da:06:e1:
         73:75:c9:48:9c:42:62:a7:65:b0:85:45:a0:83:65:a6:12:49:
         6b:36:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:20:43 2024 by rpki-client on console-ams.rpki-client.org