Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61521e7b-fc7a-323e-8e5b-f80ec0bc711e.roa
File:                     61521e7b-fc7a-323e-8e5b-f80ec0bc711e.roa (raw, json)
Hash identifier:          p12+FZNKNFbCPV0K0JbMCbDdEP55qfCTpqBtAAwwQeQ=
Subject key identifier:   10:EF:62:8D:E1:91:1D:FA:11:AE:FE:F5:4D:AE:72:70:9B:21:CB:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7BA846F474F2B61DA1170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61521e7b-fc7a-323e-8e5b-f80ec0bc711e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.144.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:ba:84:6f:47:4f:2b:61:da:11:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d0f03fbd-1e6e-4f66-b03f-0dd8a106f1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:ed:24:68:07:4e:2c:f3:63:71:fe:a9:ac:
                    ff:fa:09:9d:51:bc:c7:b5:39:8d:5b:6b:bc:4f:2f:
                    c4:71:fc:fd:e8:8d:14:05:b5:9d:27:ac:13:2a:79:
                    71:a7:1b:6e:f8:c6:a9:ee:7f:5e:12:c8:9e:ab:ec:
                    51:ed:23:07:31:c9:9c:fc:c6:29:2b:1d:63:54:21:
                    fc:32:17:b4:b5:14:65:54:b0:e3:a8:dc:ff:bd:ea:
                    3f:25:30:c0:41:ef:7d:2d:f0:3b:d3:a0:73:37:68:
                    f9:93:06:de:33:05:54:9b:3f:aa:cd:1c:f7:39:80:
                    42:e3:1b:6d:7c:12:9f:84:40:17:ef:7a:5c:c4:21:
                    24:e5:15:82:3d:bc:fd:48:c1:e8:72:50:a9:90:26:
                    99:b7:6f:90:17:49:63:ad:e6:46:1f:e1:ba:fa:28:
                    fe:dd:da:ee:fc:42:07:60:b2:02:ec:47:00:5d:dc:
                    6c:18:a1:6e:28:5a:72:26:e4:d7:c5:27:a0:53:78:
                    cc:89:3f:2e:ea:66:20:8e:f8:64:9f:9c:bb:4a:cd:
                    e3:ab:60:b1:f4:9f:0d:18:8f:49:de:01:c2:a4:9a:
                    0a:68:87:f3:63:d8:a1:7c:d5:8b:fc:65:ac:28:c0:
                    1a:19:18:8c:11:08:9b:34:72:98:e3:e4:7d:57:48:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EF:62:8D:E1:91:1D:FA:11:AE:FE:F5:4D:AE:72:70:9B:21:CB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61521e7b-fc7a-323e-8e5b-f80ec0bc711e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.144.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:dd:af:8a:8a:b8:d4:13:35:28:e4:b7:fa:a3:b8:31:fd:bb:
         48:a9:47:68:67:1b:5b:3b:b6:d9:27:80:96:be:14:cf:2a:b3:
         49:14:92:76:14:94:dd:ba:a6:1f:13:c5:f2:7b:88:15:a8:fc:
         8b:40:50:54:ad:69:99:f3:46:4c:e0:9f:2c:1a:48:40:2c:e7:
         44:90:71:d3:37:91:f7:1e:34:27:08:60:fd:87:2f:cc:2b:2c:
         d3:54:59:1c:4c:07:ed:1c:2d:1f:fc:57:de:89:69:ca:5e:76:
         e9:e0:dd:2e:3c:8d:20:ea:8f:f0:81:a0:b3:f0:c2:81:a6:ca:
         e9:8b:39:23:ea:9d:a6:39:86:6e:9c:79:bc:74:78:bf:fd:67:
         e4:f8:4b:85:b7:93:a8:07:91:3e:cf:17:f2:62:b9:f8:86:24:
         f5:06:04:0a:58:9d:b7:fc:b5:a2:6b:20:76:bd:0f:86:ba:e2:
         3c:75:b3:dd:13:8c:9d:48:de:08:21:8a:4d:99:63:51:c1:ca:
         a3:17:f3:cf:b5:8a:2c:54:9a:fe:12:fa:63:67:b7:8a:48:2d:
         8b:e5:97:73:1d:2e:55:de:05:96:51:b6:c2:92:e5:03:f6:13:
         a4:d3:28:12:d2:e3:f7:47:09:d2:71:39:85:7b:51:e1:ed:49:
         33:f9:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:04:41 2024 by rpki-client on console-ams.rpki-client.org