Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c26f57-a306-3956-b4e9-a9f21d482a68.roa
File:                     60c26f57-a306-3956-b4e9-a9f21d482a68.roa (raw, json)
Hash identifier:          aN6OlV5daSww0rNotxNT0FhJQiTYRkABM1G6X37eEvs=
Subject key identifier:   C8:86:88:8F:BA:A3:C1:CD:B8:4B:0B:FA:2A:6F:E0:4C:B6:41:D5:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C107198F20FBC7D57066A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c26f57-a306-3956-b4e9-a9f21d482a68.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.178.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:71:98:f2:0f:bc:7d:57:06:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5c738a07-145b-45d8-8ace-36fd3ff79757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:15:a0:c4:a9:73:dd:d6:f1:c0:cd:76:1a:
                    c2:4e:c9:40:55:e4:1f:a6:33:be:8e:70:c3:07:48:
                    bc:2c:f5:2f:65:09:90:8a:64:ef:a3:a3:b3:5f:c5:
                    93:7e:54:46:07:71:a8:8f:64:09:99:88:50:56:7f:
                    8e:3c:91:67:78:13:a3:10:a6:fa:e5:ef:94:ba:68:
                    eb:04:4f:50:9c:0d:61:56:f1:80:23:a7:91:cb:cc:
                    0d:c7:df:5f:2b:20:7f:3d:71:8b:37:6b:ed:f7:d9:
                    0d:ef:00:be:dc:40:cf:ae:e2:f4:5f:c6:cb:1c:e1:
                    78:11:06:3b:14:6f:0d:ff:63:df:b5:f3:97:60:b8:
                    3f:c3:29:53:43:a0:0e:4d:32:ce:7c:32:ae:06:df:
                    c0:ef:7d:f9:c5:3e:8c:a3:42:8b:38:33:52:af:b8:
                    87:79:cf:57:ae:e9:76:d5:b0:56:6e:e9:54:43:af:
                    b2:6c:41:f6:96:d6:3a:0d:c0:f0:da:c2:b9:ac:3b:
                    fd:7b:7f:e0:a4:8d:dc:09:41:95:98:ad:15:2e:7f:
                    85:5e:2e:20:69:76:1d:95:bc:32:32:73:79:da:79:
                    3b:68:e7:e0:68:41:95:dc:ba:59:49:e0:53:61:9e:
                    b0:1a:be:fc:f8:f5:d5:37:37:23:5d:94:9e:a5:f9:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:88:8F:BA:A3:C1:CD:B8:4B:0B:FA:2A:6F:E0:4C:B6:41:D5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c26f57-a306-3956-b4e9-a9f21d482a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.178.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:94:07:3d:f9:16:03:ff:18:58:95:49:7c:a3:b7:6c:63:7d:
         41:c2:76:ee:a1:d1:db:40:04:ee:01:cd:80:67:4e:68:b4:ef:
         a6:43:89:38:0c:4b:39:a6:47:a9:b9:47:9a:99:61:9c:f1:cf:
         b3:bd:20:f7:5f:c2:a5:36:9e:07:41:de:37:2b:e4:c9:eb:c6:
         d1:f1:e4:ae:57:73:dc:00:c3:ea:b0:f4:25:04:18:ec:16:e4:
         ad:e7:85:f1:ec:48:8b:0d:9d:ca:36:70:91:a5:18:1a:28:6b:
         5c:ad:21:2d:55:21:92:f9:09:a9:56:82:e9:38:b3:db:22:9b:
         87:e6:a7:7a:93:fc:e5:18:ee:df:8f:e6:57:f8:80:af:03:9d:
         7a:3a:62:cc:d3:66:b1:de:96:d0:1a:a3:49:f0:5a:14:45:1c:
         5b:92:d0:aa:9d:df:79:84:f2:16:8d:50:e7:b9:03:47:13:b8:
         a9:75:2b:69:5b:77:4a:7a:e4:cf:ee:39:d5:9a:b7:d4:63:de:
         b4:97:ec:62:77:07:6c:a9:68:81:23:d8:5e:33:84:f0:92:6b:
         2e:07:7c:29:2d:87:b9:a7:a3:69:b6:03:78:6d:f1:ae:8c:a7:
         18:44:9d:a9:d4:71:a6:79:62:e2:c3:44:5b:5b:29:5c:32:eb:
         fe:8e:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:24 2025 by rpki-client