Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eac2aab-496c-38af-83bf-c90f7c8e2475.roa
File:                     4eac2aab-496c-38af-83bf-c90f7c8e2475.roa (raw, json)
Hash identifier:          Rv7CljD/l7cVbm4Ho0EARhAilzKe09qfVf/5t5mULXE=
Subject key identifier:   25:CB:BA:F0:0C:89:38:1D:0E:10:B8:68:F2:44:4B:5B:C3:42:90:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E59A787DA21499FA28E180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eac2aab-496c-38af-83bf-c90f7c8e2475.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.82.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:9a:78:7d:a2:14:99:fa:28:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=fc4d6e53-62c4-4d67-b79c-52c357948e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ee:2a:eb:ff:50:b3:09:68:c8:e1:b9:a9:fa:
                    e6:bb:48:8c:59:97:be:88:3c:65:89:a8:74:ce:ed:
                    b4:21:5c:39:5a:d6:2e:d0:84:3d:18:12:1d:cb:74:
                    f0:81:fa:f2:ec:32:4d:06:53:85:5c:fc:a0:8f:fe:
                    39:d8:3a:d9:c3:30:42:cf:5f:b6:58:39:9d:e7:31:
                    54:d1:b4:1e:f9:fa:d5:83:20:97:d9:e0:48:ff:21:
                    88:dd:61:49:e1:c7:f1:9c:01:5a:0a:8e:95:6c:d6:
                    ea:d7:28:b6:c2:91:d7:13:58:cc:da:b7:2a:7b:01:
                    8f:e6:38:ca:83:b6:8e:ba:d3:e2:8e:d1:22:99:ef:
                    5a:c5:4f:2d:8d:14:8e:90:e6:dd:1d:10:ce:ba:3c:
                    78:81:fb:ee:9b:77:cb:52:ef:e4:09:34:75:b3:fa:
                    ae:41:21:84:2e:01:c5:d5:14:7e:9c:ff:88:b6:46:
                    ca:73:f3:87:69:ee:d5:f8:64:19:ef:b8:55:6e:7a:
                    7f:e8:ad:a1:e9:d8:2f:f5:00:a8:c5:6e:4e:1a:db:
                    39:f3:59:1f:74:b7:8e:e9:d2:c1:04:c5:49:9b:07:
                    c5:65:4d:c3:bf:a2:4d:44:96:47:ba:12:03:e8:a9:
                    9f:4a:ab:24:e7:61:cb:88:38:51:74:85:57:98:53:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:BA:F0:0C:89:38:1D:0E:10:B8:68:F2:44:4B:5B:C3:42:90:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eac2aab-496c-38af-83bf-c90f7c8e2475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.82.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:b7:16:7e:96:71:98:b2:5c:c3:ee:0c:9e:57:46:9b:a2:
         cc:b8:da:71:c3:af:12:85:b3:26:4d:d3:7f:15:57:1a:d1:f5:
         de:50:9e:8f:ce:ea:47:5b:f0:a1:6b:78:b8:b0:87:b6:90:3b:
         8b:99:d1:df:dc:a7:91:80:4a:4a:e1:8f:0c:e2:31:3a:ad:ea:
         5b:41:3a:09:a2:6c:91:bf:6c:48:4f:76:d5:bf:0b:83:18:3c:
         51:43:89:15:4b:1d:3d:9f:b7:da:2c:99:51:6b:d3:0d:65:6d:
         17:6b:1c:16:bc:e5:be:39:b5:eb:cd:be:c9:a7:a7:a2:e6:29:
         5c:44:e8:8f:6d:e4:9d:8e:94:a5:28:51:06:49:4c:51:13:72:
         2f:8a:bd:85:3d:0e:e8:69:e7:15:e8:f2:9b:13:af:c0:42:82:
         f1:19:85:4d:5e:cd:5f:2d:75:65:b1:c7:fe:4e:d3:a5:78:52:
         18:40:a2:c4:80:25:d8:b1:1c:9c:ef:cc:74:bc:fd:8c:17:28:
         aa:97:a9:12:d3:32:d1:a0:12:a4:95:3b:ef:cc:8e:42:4f:fb:
         a2:f0:06:ce:aa:d9:01:a5:e2:6a:e1:e7:be:1d:c7:dc:bb:8a:
         39:27:53:f6:be:72:8d:22:78:a5:99:0b:a5:63:97:d4:82:1e:
         8b:8f:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:10:09 2024 by rpki-client on console-fra.rpki-client.org