Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a15f561-cd82-3e91-8759-735387f76785.roa
File:                     6a15f561-cd82-3e91-8759-735387f76785.roa (raw, json)
Hash identifier:          pEkTi+kHa2iBsvsQP/t317sriyN+9LltNrB3LbTEXJE=
Subject key identifier:   F9:5B:72:CE:84:7A:1D:24:53:F7:6B:FC:46:20:F0:FA:A8:F3:92:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7C2B8D768A934ED4FCF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a15f561-cd82-3e91-8759-735387f76785.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        73.65.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:c2:b8:d7:68:a9:34:ed:4f:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=242c29d7-5e14-496d-b66b-f30a79e74011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:46:28:26:c8:e4:60:19:c5:19:c6:1f:4c:
                    ef:d9:84:19:ef:8b:4b:0a:9c:d1:f1:10:c0:08:b8:
                    10:9e:d5:61:bd:3b:af:db:a0:03:33:17:73:47:22:
                    a5:a0:f6:0c:07:2d:af:03:b5:b3:12:6f:a8:b9:7f:
                    12:3f:b7:42:1c:cc:c5:68:0d:5d:51:6c:39:2e:91:
                    ca:aa:fa:a5:7b:a6:d1:ad:9e:ab:4e:36:24:2f:f0:
                    55:6c:8e:39:e1:82:ef:58:f9:3d:d7:17:4e:c7:a6:
                    8c:e1:6e:a5:77:59:c0:63:34:bf:36:c5:52:c7:88:
                    eb:89:81:b9:9c:7f:41:62:23:24:76:07:c9:f6:ed:
                    2b:0a:d4:eb:23:d3:3a:99:7d:53:f6:5f:32:e3:6d:
                    82:34:c2:e4:03:50:01:e6:19:5b:ac:b7:61:6f:88:
                    71:e9:7c:86:e2:3f:53:d8:32:8e:f9:eb:ea:56:35:
                    8b:52:6f:13:93:1e:b4:60:9a:1c:25:fc:be:b9:42:
                    88:ea:48:ea:5b:5e:01:4e:04:75:c8:55:54:18:66:
                    90:4f:75:72:ec:23:52:47:0c:aa:58:9c:d5:5d:79:
                    e7:5e:04:c4:6f:7d:32:93:53:90:45:d6:b4:02:c8:
                    a5:a2:3b:d0:79:8f:26:e6:f0:e4:c3:8b:df:72:db:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:72:CE:84:7A:1D:24:53:F7:6B:FC:46:20:F0:FA:A8:F3:92:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a15f561-cd82-3e91-8759-735387f76785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.65.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:e1:2d:41:5f:7d:2a:36:d3:20:d7:71:80:b7:cf:fe:d3:9d:
         f8:2e:c0:48:1b:5b:e8:44:f0:dd:3f:4d:85:b5:5f:94:4d:5a:
         04:48:4e:6a:8e:a2:34:17:f2:e2:e2:6a:3e:81:7f:d2:c4:28:
         f3:91:2c:dc:f8:7b:1d:da:06:80:6c:e0:2a:76:4e:bb:c7:09:
         0d:79:85:6a:ce:62:14:cc:b7:5a:8a:c8:3b:42:98:98:03:ea:
         cd:6f:10:9e:8e:d0:d0:8a:51:43:3c:24:93:22:7c:23:6f:81:
         3b:b4:88:95:14:ca:c1:02:60:d0:4e:83:15:c9:9a:8f:42:0a:
         4a:96:b5:ef:ae:e5:e1:e7:a4:a1:83:0a:e6:c8:dc:59:a6:20:
         41:f7:84:3f:88:b8:8f:68:9f:1b:5f:04:72:2b:67:9b:6d:69:
         0f:17:13:fd:d9:68:51:bb:55:cf:df:1d:18:df:03:4b:15:84:
         d5:35:0b:99:81:e9:9c:ed:3f:12:f2:1c:2d:30:56:c3:2e:77:
         4f:24:43:4f:39:9d:8e:48:13:8a:d5:45:af:a7:01:d2:92:b1:
         f9:ee:07:16:66:30:13:95:76:0c:70:6e:c0:8a:03:5d:06:e6:
         37:3b:2b:f8:aa:79:84:89:23:19:33:81:5e:88:63:23:53:86:
         d5:af:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 10:55:14 2024 by rpki-client on console-fra.rpki-client.org