Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f4e0a1-51bb-3922-95f2-4ae09d6d8691.roa
File:                     73f4e0a1-51bb-3922-95f2-4ae09d6d8691.roa (raw, json)
Hash identifier:          A0bFu+HudibB/zjtbmIOn786TNieLaFsHpb9dd4491E=
Subject key identifier:   97:3F:FA:3F:68:CD:7D:BB:59:80:AB:D0:4D:21:25:E8:21:A4:86:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E9D99F72A4E5BD3C477F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f4e0a1-51bb-3922-95f2-4ae09d6d8691.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.248.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:9d:99:f7:2a:4e:5b:d3:c4:77:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=23daa323-6616-47e2-a779-ef2b1f6cc9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:bc:16:fc:cd:1c:8f:27:36:6a:65:7f:c4:
                    16:c6:18:93:91:c1:67:09:df:73:87:71:42:dd:a6:
                    c6:fd:05:ab:c8:ce:06:c9:69:3b:85:83:76:f1:e5:
                    4b:77:3f:f7:e3:66:a0:3c:d0:b2:54:85:36:48:68:
                    45:11:94:e9:42:e3:df:98:9d:8b:7c:64:df:e1:ca:
                    fa:6b:7d:b1:42:e0:d9:cc:c2:50:32:bd:f7:7f:32:
                    37:45:12:9c:d6:f7:28:2d:f9:35:51:7b:71:c1:dc:
                    d1:b3:48:35:76:1b:c9:4b:66:36:21:22:01:0c:f6:
                    84:ae:60:dd:8f:48:be:a7:fd:14:72:b7:3b:80:1d:
                    6e:5f:16:a8:90:99:5c:45:9c:96:75:79:7f:c6:2e:
                    3d:b7:5b:69:4d:2b:5d:77:1b:b8:cf:22:ac:92:7e:
                    11:4d:a4:f8:66:a7:d8:c1:6e:8b:1f:cd:98:78:6e:
                    f7:52:8d:d3:ae:89:93:82:50:65:ce:8d:db:b5:ec:
                    88:84:96:16:7a:cb:62:71:5a:43:66:16:b2:70:be:
                    3e:45:9d:5b:c7:52:6f:4f:d3:74:11:87:99:48:5c:
                    74:ba:eb:1b:d9:2f:35:b2:0d:99:45:87:17:8b:a2:
                    ae:bb:5f:65:f9:90:bb:a9:44:fe:38:4d:10:52:ca:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:FA:3F:68:CD:7D:BB:59:80:AB:D0:4D:21:25:E8:21:A4:86:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73f4e0a1-51bb-3922-95f2-4ae09d6d8691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8f:d4:64:3a:08:a8:71:8a:5c:02:a6:d7:e9:89:0f:8d:d2:
         a7:28:0c:a8:54:17:b3:d2:b3:76:34:74:74:da:64:f0:54:43:
         a1:bd:6f:e5:c3:5d:1b:01:c4:09:9c:41:4d:4d:34:e6:4d:47:
         c8:fc:a9:99:1a:b3:17:ee:25:d1:fa:28:7d:9f:28:44:2b:d2:
         43:7d:5b:d1:82:4c:6c:e9:8c:63:04:fc:72:57:a5:de:40:ea:
         f7:a7:99:13:23:0a:ed:64:5e:b1:2a:17:47:a8:1a:5a:54:91:
         cf:36:e5:6c:d9:e0:eb:97:55:54:6d:58:a2:7f:86:ba:c0:f1:
         96:10:fa:33:fd:eb:ae:f3:ec:d5:e8:e9:f4:2e:c0:ed:33:c9:
         00:3d:ac:ce:c9:b3:6b:2c:34:97:cd:7b:b3:9e:d1:11:bd:3c:
         50:1d:64:27:ff:e6:92:77:1c:ff:60:4b:1c:bf:f5:40:8f:a6:
         a5:8c:65:3d:3f:d0:57:09:be:87:7b:b8:a0:6c:26:8e:fb:67:
         de:4c:34:5a:73:6f:7e:fe:00:5d:a3:54:8b:30:92:0d:84:d8:
         8a:d2:61:19:fa:39:f0:07:2a:47:c5:53:fe:3e:a7:42:65:69:
         97:b9:74:0b:96:d1:1d:9c:18:4c:c3:05:e5:70:4c:d1:c2:8c:
         a2:0b:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:42:39 2024 by rpki-client on console-fra.rpki-client.org