Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b40b5ef-c196-3e98-931e-06fef235ff8d.roa
File:                     5b40b5ef-c196-3e98-931e-06fef235ff8d.roa (raw, json)
Hash identifier:          qyhKDcUdK1DSykh28yWWSsI7qNw60ibbAimG8HiWrZs=
Subject key identifier:   A7:8A:26:2A:29:B7:DE:96:DB:9F:09:25:A7:B4:CE:25:44:C9:A0:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D639541AE27367984E590
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b40b5ef-c196-3e98-931e-06fef235ff8d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.71.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:63:95:41:ae:27:36:79:84:e5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=21a1f9c6-1b1f-41fe-9dd8-7e37a0c5cd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:ee:d0:1e:0d:91:72:e5:03:6c:fd:61:4b:
                    7a:36:d5:61:25:00:36:b3:4c:88:80:d6:ed:de:7d:
                    89:67:62:7a:44:d2:8d:f8:c2:3f:b3:ff:17:ef:5c:
                    b6:1c:63:d5:e9:de:02:07:df:5e:42:eb:3a:47:8e:
                    ae:e2:1d:cf:d3:2d:a8:ba:0d:3a:18:e9:93:ab:af:
                    57:d0:05:4e:52:7f:0c:48:b7:59:9e:cd:96:7b:d1:
                    f5:ca:47:2d:b1:56:08:95:df:06:90:25:65:75:f3:
                    bf:e1:16:81:4e:d8:be:a0:0a:4a:4c:42:77:a7:a7:
                    a1:28:de:01:81:31:02:8b:ee:bc:a4:b4:cf:70:d0:
                    a1:df:53:0c:f7:82:c1:5d:ed:a5:69:d5:1f:0e:e5:
                    e5:52:26:bc:b6:12:5d:85:3d:af:33:32:dd:a2:c5:
                    b1:5e:b9:d5:19:ff:bf:4c:4b:cc:a0:81:d8:d2:6b:
                    8c:28:8a:e6:c5:bd:49:6c:0a:b5:02:7a:89:16:4e:
                    b0:42:56:ac:a1:1d:af:94:6f:fc:45:3d:78:f1:af:
                    0d:20:b7:c1:f8:dd:e7:3e:6b:b6:6f:37:70:fb:f4:
                    76:d2:bc:98:dd:cf:52:21:67:d7:0b:80:4f:ad:95:
                    15:4f:48:07:9b:f0:37:d2:bc:0c:92:b9:72:da:ae:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:26:2A:29:B7:DE:96:DB:9F:09:25:A7:B4:CE:25:44:C9:A0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b40b5ef-c196-3e98-931e-06fef235ff8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:75:a0:f8:9d:0b:e8:99:06:e4:53:24:40:0e:71:2b:ac:2a:
         5e:70:9b:3a:62:c9:67:73:10:38:85:1b:ff:21:0d:7e:7a:c2:
         b9:3d:9c:2f:06:4d:5c:b4:42:c4:d9:cd:d7:0d:69:4e:60:7f:
         32:de:94:a2:b6:43:20:41:c1:57:c5:c8:d7:7c:3a:c2:a8:4d:
         19:36:e7:39:c0:c7:37:de:80:4c:fd:e8:90:84:8c:88:f7:a0:
         ce:e5:19:4d:9d:b1:c4:31:57:36:9f:74:46:d8:cf:13:32:a8:
         cd:7f:f9:76:5f:e9:c4:4d:1c:57:db:96:56:54:3a:32:f7:55:
         ce:72:39:2f:c7:09:bf:63:3b:dd:dd:4e:bc:fb:33:b2:ac:18:
         d3:a0:57:f5:ad:ae:38:27:13:35:de:83:19:2e:d1:cb:fe:8a:
         a6:37:2a:5a:dd:bf:61:c3:78:82:83:48:61:b5:6a:a0:20:89:
         61:bd:7c:0d:5f:f3:42:5e:00:ad:59:78:a7:66:82:9c:0a:f5:
         47:2e:7c:79:b4:1c:b7:95:2d:d3:85:8e:73:6b:a4:bc:e8:c9:
         db:42:33:9c:bb:fa:66:6c:1e:d1:78:c0:da:c5:7b:48:2d:ab:
         89:54:f5:df:cf:b5:86:50:d7:26:ff:11:48:e1:37:03:3f:86:
         ee:3e:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:07 2024 by rpki-client on console-ams.rpki-client.org