Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f318acd-eff5-3e37-8802-80cd1110a12a.roa
File:                     5f318acd-eff5-3e37-8802-80cd1110a12a.roa (raw, json)
Hash identifier:          lTngfjyGd2qHrG78qWijC07pCBBiIzCo8I7Fzk/0Bpo=
Subject key identifier:   DC:42:7E:85:2D:5F:CA:E4:DB:7E:D2:5D:CE:15:C6:3C:1C:43:A3:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C706429D714F7E72F76DF6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f318acd-eff5-3e37-8802-80cd1110a12a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.38.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:06:42:9d:71:4f:7e:72:f7:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=79b439da-33f8-4328-9381-8e8767c7a3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:1d:66:9d:e0:19:bf:b4:52:a4:c0:9c:45:
                    95:41:1f:94:a3:e6:78:86:c1:03:f3:4e:c8:48:d1:
                    52:ee:68:3e:28:0d:f8:ec:d2:c4:35:e7:91:0a:f7:
                    8b:91:67:48:fd:68:0d:40:e3:35:28:f4:29:e4:b0:
                    72:74:be:70:84:5e:1b:c9:c2:7b:3c:79:38:8c:c6:
                    b5:3f:7e:44:1b:f7:3b:07:1e:1e:6e:c3:cd:ab:2c:
                    b9:76:c1:df:e4:01:8c:4b:1d:60:89:75:8e:02:c5:
                    de:14:68:95:8e:61:31:71:c4:bf:3d:bf:45:7e:05:
                    1e:08:98:a9:fe:8d:74:0c:b2:d6:36:6e:66:c1:c8:
                    85:dc:ef:f5:81:45:19:0b:3e:c2:a5:e1:b7:e1:b0:
                    48:f0:f5:5f:53:47:35:f2:f9:9d:36:b2:94:25:f5:
                    9a:be:0d:66:b1:dc:8e:34:37:02:ef:56:fd:af:98:
                    5e:06:7e:c3:db:6f:ef:69:bf:0f:6a:75:15:5a:c3:
                    6f:c3:9f:78:81:d6:bf:4c:92:72:cc:9a:1f:74:11:
                    40:c1:aa:e2:f2:b0:f1:1b:87:0d:7f:75:d5:ea:85:
                    31:ec:46:40:19:d3:93:e0:85:05:80:5c:00:4e:79:
                    4f:df:83:48:1d:40:10:94:e4:95:11:75:23:b7:b3:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:7E:85:2D:5F:CA:E4:DB:7E:D2:5D:CE:15:C6:3C:1C:43:A3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f318acd-eff5-3e37-8802-80cd1110a12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4c:18:20:4d:c1:b9:6f:e8:82:d1:31:b8:b9:43:36:48:f5:
         a6:48:63:d1:a0:1a:5b:2a:7d:e2:63:90:80:30:bf:a8:88:50:
         fa:db:39:c4:d9:05:21:a7:3a:8c:30:d3:5f:f5:65:15:21:5f:
         d4:5e:c9:2d:25:8c:53:10:27:b0:3f:95:78:47:1c:64:40:3a:
         92:ea:28:7f:00:ed:09:d7:26:0c:05:97:b4:f3:dc:57:b4:21:
         29:4a:01:25:15:f0:30:b9:79:ee:13:6d:40:d3:86:d9:d9:de:
         17:ef:79:f3:61:61:c9:56:ad:b0:74:3a:7f:42:9d:9c:d7:7b:
         42:ef:6c:e0:10:bc:c1:34:87:d4:86:12:2b:ea:a6:3c:ed:64:
         6a:53:07:6b:c8:60:8c:f2:b3:fa:45:51:be:76:8f:b7:e7:bc:
         32:16:90:09:db:88:44:36:b3:2e:0a:3f:94:8d:35:bf:4f:46:
         e2:47:20:92:6d:69:dd:0b:14:6d:2f:43:3b:9d:5b:20:0a:60:
         49:41:99:ef:fa:38:41:be:f3:88:f8:0e:b0:f0:be:64:e7:92:
         1f:42:bf:55:19:70:02:41:dc:99:c9:8f:2c:df:6c:74:ad:eb:
         01:33:bc:af:ed:0d:fe:6c:a2:33:ca:36:ee:c8:87:9c:89:0a:
         71:85:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:29 2024 by rpki-client on console-ams.rpki-client.org