Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7dea24-0f32-3190-adec-dcf4626d3e4f.roa
File:                     4e7dea24-0f32-3190-adec-dcf4626d3e4f.roa (raw, json)
Hash identifier:          xXMeEUj7jaNkdoxBEtB7SqobbRtfsSxh4i+6Lj+mQj0=
Subject key identifier:   91:9C:56:88:2A:69:6A:EF:8D:6B:70:84:94:31:1C:B8:1D:7C:97:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D252680AAA23AEC99F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7dea24-0f32-3190-adec-dcf4626d3e4f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.158.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:25:26:80:aa:a2:3a:ec:99:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e6e7dc7f-c2e1-4cad-b4d6-4b2ad2f44fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:ab:84:b8:f6:49:41:34:fb:50:c7:7b:b3:
                    86:80:14:75:d9:2e:2e:f0:c0:8c:0e:03:a9:d0:62:
                    55:d1:6f:a8:cd:59:11:44:24:2d:4e:c1:e2:27:78:
                    1b:7f:d9:19:07:82:fc:cc:74:31:b3:7c:39:eb:f7:
                    85:59:88:fa:18:8a:d0:85:95:99:fb:34:3f:23:41:
                    9d:89:e4:ee:a4:33:c1:47:70:dc:b7:9d:c8:a7:ee:
                    a0:a0:41:63:55:31:1b:ea:31:44:8e:e3:21:0b:d0:
                    e9:3c:fc:54:b0:b0:8c:fd:bd:17:0b:d5:df:e6:69:
                    6e:69:b3:45:d2:4e:2e:bc:9e:7b:0d:ff:74:07:ce:
                    93:2d:12:6c:3c:10:69:71:50:dd:e4:42:c4:eb:d8:
                    b4:a5:82:24:6a:44:6c:ab:39:5b:3f:53:ab:04:14:
                    d8:8e:16:ca:2d:1b:d1:0e:2f:62:4c:6f:cb:ad:f7:
                    3e:b8:41:0d:9c:fb:f6:d2:14:bb:61:bc:ec:0d:55:
                    40:bf:24:19:18:07:55:f9:6d:80:03:da:97:8d:11:
                    ec:e7:64:28:f8:0f:6c:cd:c0:8c:5f:a1:de:a3:6a:
                    f3:d4:f6:e5:d1:52:09:f3:a8:ad:80:ca:83:b2:69:
                    c4:76:1e:cf:92:bc:1b:65:bd:e2:12:74:25:76:f7:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:56:88:2A:69:6A:EF:8D:6B:70:84:94:31:1C:B8:1D:7C:97:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7dea24-0f32-3190-adec-dcf4626d3e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:77:ee:e6:e2:c4:d6:d8:b0:e3:91:88:dd:7a:88:fd:49:
         b8:dc:67:de:ed:ec:d7:2b:09:cf:15:61:2d:27:de:7a:ff:ba:
         0b:46:7f:78:32:7c:cd:76:ef:4d:ea:4f:1f:27:27:50:48:43:
         8d:5e:db:32:12:66:d6:05:1e:65:46:94:45:64:d2:ee:49:72:
         9a:09:1b:76:f9:42:ad:4e:a9:53:65:6a:34:88:f7:d2:ca:64:
         64:d2:ed:17:92:ca:8a:e8:87:60:aa:b9:5a:19:48:62:5e:dc:
         4e:75:d2:4b:d2:50:c6:b1:7c:80:73:0a:6b:dd:22:3e:dd:f2:
         d5:0e:53:6f:fc:11:c8:7f:c6:45:83:4c:ce:df:2d:9d:cb:27:
         35:bf:37:4c:98:93:90:34:81:b9:fb:02:f3:67:aa:8a:af:50:
         8c:80:0b:6c:c1:e2:c4:3e:72:80:3e:70:7a:2c:ca:2a:4e:7c:
         c5:79:b7:ac:f3:20:76:df:a5:00:48:17:2a:ac:ee:c6:24:77:
         f8:73:17:03:2c:cb:c9:32:7c:c4:0a:ba:23:80:48:76:d9:1c:
         1e:01:50:e4:9d:fb:0b:e0:e2:30:ad:40:75:25:73:46:6e:7c:
         96:84:34:5b:68:fa:f4:bb:ba:8e:d8:20:3d:39:a9:9e:2f:9a:
         11:7b:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:56 2024 by rpki-client on console-ams.rpki-client.org