Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721033ce-4c79-3003-9904-59d43cd42025.roa
File:                     721033ce-4c79-3003-9904-59d43cd42025.roa (raw, json)
Hash identifier:          KAwG8mLWsGURYtRMEMNglKcLs0MuqtV6SeeN4QNSzyU=
Subject key identifier:   E6:76:D3:C7:2A:86:09:8A:FA:59:E7:7A:1E:A6:DC:44:B8:30:48:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E58F57B5C583EDA973A590
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721033ce-4c79-3003-9904-59d43cd42025.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:8f:57:b5:c5:83:ed:a9:73:a5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=d8d238b2-c8df-4ca5-92ae-4b8048d88b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:f0:48:87:21:92:65:d8:72:a7:19:e0:a5:
                    18:0c:05:e1:fb:bf:2f:75:90:1f:ca:9c:0e:0d:7f:
                    fa:ee:9e:cd:b6:33:b9:4d:38:5b:6c:1e:12:82:aa:
                    73:84:d9:9f:2e:7a:1b:ac:44:5b:9d:e7:e0:ec:88:
                    80:e0:c1:30:35:8c:c1:e0:54:65:b0:1d:ed:23:51:
                    e8:8d:ee:66:4c:54:a3:24:1c:b2:aa:dc:f7:16:53:
                    21:c3:d2:cd:59:36:48:0c:11:5f:e7:f7:8d:d0:00:
                    24:5a:04:46:70:15:eb:a7:af:0b:3f:8a:08:75:ce:
                    2d:ec:35:18:74:8c:d1:ae:5f:3e:a5:2e:3c:70:99:
                    9c:cf:6d:4c:97:76:2b:63:d8:83:10:9b:e0:60:d8:
                    aa:dc:a7:bb:f4:1f:3c:8e:e8:bf:26:6b:24:1e:7c:
                    5a:55:d5:89:eb:89:ad:0f:d7:00:d2:eb:28:0b:55:
                    08:ca:1f:1c:f7:73:b6:af:27:dd:44:03:4d:2a:c6:
                    6e:79:46:bd:b6:87:7e:65:d6:fe:2b:18:a1:81:af:
                    9a:2c:a0:69:e5:cb:fb:d6:43:c7:1a:7a:69:ba:e7:
                    30:c0:a8:23:2d:c1:aa:5a:76:a7:c4:e7:ee:ed:72:
                    e1:6a:d2:e6:80:d2:58:dc:00:c2:96:71:74:8d:c1:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:D3:C7:2A:86:09:8A:FA:59:E7:7A:1E:A6:DC:44:B8:30:48:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721033ce-4c79-3003-9904-59d43cd42025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:27:71:a1:5d:f5:55:ac:71:26:ad:ca:f7:74:e4:3a:eb:e6:
         10:ec:e5:c0:b3:a1:09:1d:07:d9:6d:97:97:00:af:ba:c0:75:
         aa:00:61:12:fa:b7:7d:a9:bf:8f:e1:7b:ac:66:45:0c:fa:b9:
         31:09:1b:7b:c9:1d:91:82:56:00:46:cc:5d:84:66:13:ed:a2:
         30:03:75:39:4a:df:41:c8:f3:0d:fb:53:dd:eb:d1:4b:b1:a5:
         32:f3:e2:c4:b2:69:b7:a9:0e:a9:5c:96:cf:86:d2:93:c1:55:
         02:a2:16:46:d2:c6:b7:f9:e3:9e:bb:28:12:2a:66:e8:7e:eb:
         30:fb:2b:80:1d:9a:21:04:88:df:21:7f:c0:03:e3:91:2a:0c:
         b6:e8:f6:e9:05:83:2b:fc:f7:2e:c3:98:27:d4:6c:9a:8c:80:
         27:7e:08:12:83:59:b7:b1:79:aa:98:5a:fb:24:f0:30:9d:0f:
         57:38:5b:fa:4e:92:9a:31:e6:6b:bf:71:35:d8:06:e3:da:16:
         15:4e:c1:79:70:c1:d3:d8:78:7e:4c:f4:e7:04:72:0a:b5:3b:
         49:88:0f:e4:c4:1e:26:d6:b0:9c:3c:c4:f4:6a:1e:28:99:ae:
         62:ae:b2:a6:f3:31:ad:37:5d:2b:99:07:b8:2e:4c:9e:d9:c8:
         cc:35:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:16:17 2024 by rpki-client on console-fra.rpki-client.org