Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5310420f-33c0-3356-b182-1b5c21063e3d.roa
File:                     5310420f-33c0-3356-b182-1b5c21063e3d.roa (raw, json)
Hash identifier:          pMAVVrFQ2Amsoqn5nqKh1FeYi25Fdn46Mko82ei6E/U=
Subject key identifier:   2B:FA:57:3D:E0:27:F6:1A:D8:A4:BA:02:6F:98:86:60:DE:19:CB:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6D94BA6A785045E7AE2E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5310420f-33c0-3356-b182-1b5c21063e3d.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.218.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:d9:4b:a6:a7:85:04:5e:7a:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b5fd829b-d02e-4c12-83d1-6b57551e8cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:53:7f:26:a7:0e:e8:43:89:63:98:d3:80:
                    07:5c:f9:1c:0a:9c:75:ef:e8:da:d3:0c:a4:55:48:
                    75:b4:dd:dd:c4:32:2a:cd:c6:6a:25:36:cd:a9:7a:
                    bd:3b:ac:7e:63:c6:d0:97:d4:30:a0:c9:b9:06:1a:
                    ec:a1:0b:85:37:b5:55:de:28:79:b3:3b:64:3e:29:
                    da:61:0e:69:7b:c2:8e:bb:f3:2f:78:1a:b5:19:a8:
                    c4:f7:df:48:f2:fb:06:b5:e5:59:09:af:dd:65:01:
                    bc:7a:ff:12:1a:0b:cf:a6:05:4e:69:f9:84:fb:b6:
                    20:49:e1:d0:72:83:bc:74:57:2c:b7:87:c2:3c:d9:
                    85:7b:c0:85:80:b0:f6:4c:f0:a8:d0:ff:ec:f2:e1:
                    22:0a:9e:73:26:2e:d1:ae:d8:0d:34:bf:1f:0a:f9:
                    1e:71:2a:f8:0c:8b:43:da:b1:ed:f6:a5:54:13:a6:
                    a3:b8:15:0f:ee:ba:79:f5:ef:16:5d:9b:07:bc:c4:
                    56:d1:dd:ba:39:fa:eb:e9:0f:90:87:a7:28:29:1f:
                    9f:34:3b:08:ad:1e:12:f1:92:3d:8a:d3:fc:37:12:
                    3d:eb:79:ec:e6:5e:04:c8:d6:41:91:78:4b:7a:7d:
                    e3:35:bb:74:28:e9:b6:bf:43:2a:1b:e5:f5:81:76:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:57:3D:E0:27:F6:1A:D8:A4:BA:02:6F:98:86:60:DE:19:CB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5310420f-33c0-3356-b182-1b5c21063e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.218.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:10:b4:49:af:12:3f:c1:6c:1d:0e:4a:43:f7:1e:c3:16:32:
         75:11:ba:8d:0d:6b:ce:eb:87:ca:d5:db:38:94:df:e8:b7:25:
         24:81:cb:24:ff:67:d8:e1:9c:d3:8c:3f:6c:7e:24:f5:d4:7c:
         54:a3:26:26:7e:49:22:38:eb:a5:f0:f4:77:8b:05:39:bd:57:
         e4:ae:46:7c:5d:3b:c9:27:d1:d6:f8:d9:00:65:d2:c0:21:cb:
         ca:d0:9e:4e:a0:d0:59:9a:d0:b2:32:9f:5e:21:c4:66:c2:87:
         13:ac:b4:35:db:a4:49:28:36:d7:c8:3a:70:7c:5b:21:51:2a:
         78:e7:75:08:d9:8b:f0:36:89:e8:85:8f:eb:e4:f0:19:ec:ca:
         62:2c:c7:55:42:3a:e0:4f:ca:1a:36:52:3a:87:19:3e:9d:63:
         69:0f:0f:72:15:2e:2c:97:5d:69:12:5f:c9:ba:57:2e:3e:ad:
         54:fb:c2:44:a9:ba:2f:c8:20:67:61:c1:fe:38:c4:b4:2a:0f:
         b0:d4:42:37:30:fc:b1:6f:cd:51:cf:37:ad:3b:54:86:1f:e2:
         34:24:21:66:20:17:39:4e:54:a0:6c:78:20:5a:c2:01:f7:bb:
         cd:50:c2:fe:ab:18:45:6f:98:1e:8c:7e:bb:d7:48:7d:7b:2a:
         9b:bb:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:24:55 2024 by rpki-client on console-fra.rpki-client.org