Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ac4ba6-d145-3e82-a783-781288e5b49a.roa
File:                     76ac4ba6-d145-3e82-a783-781288e5b49a.roa (raw, json)
Hash identifier:          MZYBOVXVYV1R2xbTjh+PrGsW60agadOgJwY60EyGc+A=
Subject key identifier:   8B:21:AD:93:00:C0:4B:9C:79:00:77:DD:9C:1F:E5:F9:67:3D:A0:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C6B6CFE030F38000D4700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ac4ba6-d145-3e82-a783-781288e5b49a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.73.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:6b:6c:fe:03:0f:38:00:0d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=931db48e-09b4-4325-905c-92b3570f077e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b7:a1:39:05:97:e3:39:70:42:16:ca:17:ee:
                    37:7e:e3:04:01:41:75:bf:d3:5d:dc:ad:f8:53:02:
                    bc:e6:c9:21:6e:ae:12:46:5c:7b:ff:64:c1:c5:74:
                    a6:e8:4b:ed:c9:3f:d8:74:ec:ce:23:85:74:93:42:
                    d2:02:ec:ff:fc:64:fc:0f:14:86:76:81:fa:d0:d5:
                    75:e7:74:24:34:6a:29:fd:d5:73:61:6d:11:98:94:
                    b3:8a:59:57:b9:00:e4:d6:08:bc:17:97:3d:70:02:
                    38:7d:ea:b0:0e:38:1f:7d:3e:3d:c7:de:61:cd:a2:
                    89:13:08:fa:26:b2:76:90:15:80:d6:21:09:54:df:
                    76:c4:60:0f:02:54:4c:a2:ed:a3:52:a7:66:d1:e7:
                    37:5a:68:e6:db:ac:b4:5b:90:9c:b1:54:62:3d:09:
                    32:76:6c:79:a6:f7:86:a3:e4:ae:86:be:c1:ee:d4:
                    18:8d:ee:30:7c:49:96:58:8c:36:f1:91:4a:a9:01:
                    8a:e6:6d:e8:0b:70:99:b3:1c:f8:96:3f:3f:74:1c:
                    9a:4f:f2:35:c1:e2:96:d9:92:fa:50:eb:a6:3a:9b:
                    b2:da:0f:f5:ce:91:39:33:e0:1b:f9:ce:32:49:f8:
                    e2:6c:0e:c3:32:e4:c6:b2:eb:a1:b1:be:b5:d5:4b:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:21:AD:93:00:C0:4B:9C:79:00:77:DD:9C:1F:E5:F9:67:3D:A0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ac4ba6-d145-3e82-a783-781288e5b49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:4b:1d:95:c6:ec:df:4a:df:0f:7b:b5:23:f9:5b:92:22:e7:
         94:52:49:c0:f8:21:72:7d:91:fa:7b:37:34:1c:52:85:f4:04:
         25:ff:b6:07:3d:f8:7f:c7:e8:92:08:6b:d3:26:73:01:db:9e:
         f6:8a:23:81:56:01:d6:6e:ef:65:5b:83:9d:0d:64:c8:4b:3f:
         af:0e:25:6f:94:44:5c:e3:0d:48:2f:c6:e5:1f:b1:a0:e2:99:
         2a:75:42:fe:41:3d:74:be:43:ff:85:3b:4e:64:e9:17:db:e4:
         9f:52:91:ef:41:0c:aa:6f:f5:5a:02:06:9b:ea:48:e3:47:dd:
         78:36:ce:a9:f1:05:0b:0d:b5:63:88:88:5b:80:9f:59:54:d8:
         71:6f:cd:0b:e5:1e:5b:52:83:20:88:f7:b4:2a:70:6f:8a:4f:
         ce:43:5f:18:25:3e:d9:17:8f:ad:1a:2e:9c:e9:2d:3a:45:05:
         6d:6b:d0:c1:bd:e4:2a:f6:57:b7:9f:f5:fe:a7:28:35:c2:e0:
         e3:94:7e:60:50:b6:6b:58:d5:d3:2d:c0:a8:1e:7a:81:76:b2:
         14:bb:ad:35:9a:77:54:9c:c8:ae:78:09:8a:91:5c:43:79:4c:
         3a:6a:c6:a2:9b:a1:f3:44:00:00:92:b1:6e:a9:37:16:34:e7:
         ca:c6:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:17:07 2024 by rpki-client on console-fra.rpki-client.org