Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566ff677-f911-397f-a9c0-82a8e47b9835.roa
File:                     566ff677-f911-397f-a9c0-82a8e47b9835.roa (raw, json)
Hash identifier:          fGRmShT+nAAz/Ue5nLGqNmmUA/rJJhFwT5SGKESIphc=
Subject key identifier:   CE:0C:76:FA:EA:39:39:6C:F7:F4:29:0C:D1:58:C2:11:D6:DA:B0:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5F4D8CA6CA484127FCF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566ff677-f911-397f-a9c0-82a8e47b9835.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.43.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:f4:d8:ca:6c:a4:84:12:7f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=c9a6b295-d774-4baa-9feb-e3d6ae194b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:41:d2:1e:93:4c:de:9c:f5:1e:52:bc:bb:
                    18:77:cf:dc:eb:b2:97:e5:7e:97:d6:04:88:c9:30:
                    a7:90:45:2c:8a:0f:7b:c8:64:95:8a:9d:ba:11:72:
                    1e:53:ab:40:c6:8d:74:8a:76:e5:35:ab:a6:0c:af:
                    dc:d2:66:02:90:94:47:cf:2d:f1:01:55:ba:19:82:
                    a2:e5:e7:4e:b6:2e:97:04:b6:04:b8:d6:72:f6:8f:
                    ba:8b:65:11:48:3a:b8:df:23:d1:b3:a1:6f:e9:dd:
                    6b:0c:75:30:75:30:c0:e6:c7:c3:34:37:7b:fe:ae:
                    53:9e:ef:95:5e:33:de:e6:60:56:65:9d:4b:0d:1b:
                    36:11:c9:ee:69:e9:63:ee:93:c0:5a:f5:0f:20:38:
                    1f:de:f2:ad:69:75:52:69:47:6f:78:8e:77:3e:9c:
                    51:3f:48:44:10:1a:88:4e:e2:ee:1b:e3:06:5e:92:
                    92:d5:29:c6:ec:c2:ad:ff:a1:eb:60:5f:07:14:ce:
                    e5:e1:b4:d4:1c:d9:bf:d1:33:11:e3:d6:d1:44:cc:
                    66:74:c0:51:14:12:f9:48:04:89:00:ca:3c:47:ae:
                    b9:1b:06:75:8f:bc:56:fe:8d:72:58:b4:f3:62:7d:
                    13:a3:76:73:f1:89:d2:b3:8b:7d:7d:a4:4a:4d:c3:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:76:FA:EA:39:39:6C:F7:F4:29:0C:D1:58:C2:11:D6:DA:B0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566ff677-f911-397f-a9c0-82a8e47b9835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:23:fd:d8:7f:86:2d:7b:55:70:f4:98:ea:7f:04:70:dc:4a:
         1f:a8:49:d6:a7:72:5d:e1:b2:b8:26:90:be:e3:0a:a5:de:f5:
         a5:c7:c0:cf:d2:a8:2c:0d:46:13:f7:1b:99:09:73:96:84:e9:
         42:cc:ca:56:1e:0c:39:7b:eb:76:22:a0:31:9e:98:1c:7a:3d:
         09:cb:9c:42:6c:af:30:10:72:36:5f:44:08:03:2c:54:3e:17:
         92:e4:98:d9:d0:56:de:8a:1e:ce:d8:27:93:9f:71:ef:2c:4c:
         f4:68:26:c5:e2:3c:bc:02:5d:e9:a9:15:24:5e:51:db:25:d5:
         05:92:d9:e5:f7:fb:39:89:f1:a5:76:64:43:be:75:cb:16:55:
         cd:3b:b2:43:d2:57:73:d0:d0:38:58:90:ca:7f:1b:79:8d:79:
         38:f7:ce:20:da:c1:19:19:1d:c6:80:de:52:15:77:56:c2:a0:
         6c:9e:9e:20:25:74:13:e5:02:72:b8:3e:43:dc:37:23:22:ef:
         70:5e:8d:10:81:1e:69:91:d5:8f:21:8d:f4:45:cc:56:28:d1:
         f9:c1:66:75:0e:14:c4:3d:ce:8f:a3:fd:4b:0c:c8:18:68:f8:
         53:31:17:11:fe:b8:ec:a8:78:23:5d:d2:13:61:38:95:d8:42:
         12:33:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:58:21 2024 by rpki-client on console-ams.rpki-client.org