Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5b95-e411-36b5-921e-9299e62f202f.roa
File:                     59fb5b95-e411-36b5-921e-9299e62f202f.roa (raw, json)
Hash identifier:          pxHgFZfmJWRGh8R+bErK82Foq5RmVJWToZywc4WHhWo=
Subject key identifier:   E6:1F:BA:0F:B8:1F:4E:D9:21:53:FE:35:07:47:96:3E:BD:E2:8E:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6C9262398D42DA7D87040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5b95-e411-36b5-921e-9299e62f202f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.167.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:c9:26:23:98:d4:2d:a7:d8:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d1c3a54a-36b6-4abe-8b39-446e025b8678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:69:50:66:bb:69:7b:78:70:a9:22:0e:23:
                    0a:0e:2e:6c:e2:1a:c1:a0:d8:f6:57:31:3a:05:66:
                    31:43:ad:32:24:93:82:10:ed:46:43:47:65:f9:95:
                    e7:e2:83:3a:6e:f2:0e:70:e3:a3:75:2c:0d:6e:f7:
                    ab:0e:21:26:0c:44:d2:84:66:2a:72:cf:1b:f5:d1:
                    5e:c7:a5:7c:5a:47:cc:61:2b:52:f3:6e:6f:00:41:
                    2f:a9:20:7f:86:12:4a:f0:da:47:1b:0c:d0:f9:b0:
                    f8:bd:2c:af:2b:d6:b1:23:ba:39:27:b0:37:42:0c:
                    64:be:2b:87:90:ba:6c:01:57:0b:f4:13:33:5a:a1:
                    b1:7a:a0:eb:92:9e:1d:1f:cc:d6:cd:84:9c:1f:60:
                    2a:b9:c3:31:53:f2:3f:ab:69:fa:aa:af:c4:95:ec:
                    7e:91:92:f5:8f:d4:80:8f:9a:3d:79:fb:6c:2d:38:
                    da:63:c5:2d:3b:28:02:b6:40:c6:41:7f:f6:f7:77:
                    bd:0f:64:34:28:e5:e0:7d:0e:82:50:27:bd:d6:95:
                    30:fb:fd:ea:1b:55:64:d3:96:8f:57:17:92:f6:f2:
                    6a:bb:98:b1:a5:4a:f9:cf:13:3b:e9:de:ba:dc:f2:
                    e8:01:9a:4c:3c:72:0d:d9:ee:58:7b:8b:f6:42:5b:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:BA:0F:B8:1F:4E:D9:21:53:FE:35:07:47:96:3E:BD:E2:8E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59fb5b95-e411-36b5-921e-9299e62f202f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:3c:37:19:e5:56:38:3d:da:57:ed:4a:c4:17:87:6f:65:
         2b:a3:4f:ea:5f:d2:76:68:e8:a6:9d:4d:06:0c:49:9f:b4:31:
         4e:2f:3c:ff:0a:c3:2e:e7:37:28:f7:b7:eb:78:eb:1b:2a:9c:
         37:e6:4a:7e:54:34:26:9e:1d:c5:8d:be:1b:d7:3c:e7:88:54:
         d1:6f:19:ca:cd:e4:53:8a:98:5b:50:be:86:27:b7:e2:5c:f9:
         ce:4f:e6:a3:6c:98:a4:89:bf:af:d2:a4:8d:24:34:42:77:4a:
         2b:00:f8:6b:73:82:7e:12:77:03:95:fe:04:2a:76:f7:5b:96:
         ef:05:16:91:1a:b9:9e:43:34:05:dd:c7:f3:0c:50:a0:6d:14:
         c6:89:ab:48:aa:96:65:74:ee:f1:db:75:fa:7d:79:b2:87:2c:
         d0:ff:96:98:da:fc:c8:94:4a:96:28:65:f8:ce:25:e5:3f:06:
         77:58:83:b3:70:9d:ee:1b:df:69:ed:7e:3e:12:ed:13:f9:aa:
         72:76:90:48:cc:a0:70:9e:3f:6a:7a:42:36:31:fe:9c:1d:9d:
         fd:25:e2:c3:7f:f7:4c:0a:03:ca:b5:1c:66:1d:5f:a7:d1:34:
         5b:b9:83:ed:48:2a:fd:5d:fc:c5:f9:f1:c6:1d:0d:15:e5:9f:
         95:f4:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:00 2024 by rpki-client on console-ams.rpki-client.org