Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a949f01-db69-3da7-b8a6-8594679f85cc.roa
File:                     7a949f01-db69-3da7-b8a6-8594679f85cc.roa (raw, json)
Hash identifier:          ht3Ib0/O//HAg6/jguiRUEx1zcXokLGncZZUP0YPBO0=
Subject key identifier:   65:23:F0:C9:AE:BE:69:99:96:86:BA:EF:00:5C:E0:6B:EE:4C:5E:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6A563ADDD8398CF27F840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a949f01-db69-3da7-b8a6-8594679f85cc.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.123.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:a5:63:ad:dd:83:98:cf:27:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=636010a2-b3ae-40a0-9d47-fc59fcb72424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:d3:e7:ec:22:76:aa:0c:cd:0a:a8:4e:02:
                    5f:c7:d5:60:be:20:49:3d:87:04:e2:f6:8c:6a:97:
                    7a:38:58:95:49:16:d0:55:c1:f7:ec:e6:2a:35:25:
                    38:30:d3:3f:7c:85:5a:1a:d5:24:10:90:69:b9:cf:
                    ca:cc:10:db:42:20:15:2a:96:10:21:59:b2:2b:f3:
                    74:be:69:d7:fa:8e:ab:c3:98:8c:34:93:8c:f5:c7:
                    c7:42:d2:0c:48:57:70:2a:54:d0:d1:0c:74:d5:3e:
                    18:97:0e:45:98:29:18:bf:30:e9:4b:9c:27:ce:20:
                    98:28:1a:d8:83:29:c6:b5:d4:d0:46:01:62:40:0e:
                    65:d9:2e:42:1d:4b:23:3f:41:1c:7c:63:09:44:6e:
                    a8:59:d0:af:81:53:63:5b:42:14:bc:17:4f:41:94:
                    22:aa:50:f6:8e:f7:79:a4:41:01:fa:d0:35:dd:d8:
                    51:7d:5b:88:72:13:64:6f:71:a5:45:38:11:eb:7e:
                    6f:df:3e:43:ac:7c:da:ca:16:31:5d:6a:18:d5:73:
                    b5:3e:fd:ef:ec:c6:4b:61:4d:51:3d:0a:f2:0e:a4:
                    b3:47:9d:cd:23:b0:85:13:a7:08:2a:fd:71:f8:9a:
                    b0:86:f3:4d:21:05:c2:83:40:7d:6b:20:60:61:bb:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:F0:C9:AE:BE:69:99:96:86:BA:EF:00:5C:E0:6B:EE:4C:5E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a949f01-db69-3da7-b8a6-8594679f85cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.123.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:98:d8:ee:f3:a4:d8:fa:eb:35:38:d0:74:3b:5d:91:e6:
         d0:81:3f:25:13:52:1d:dc:29:4d:ea:92:73:da:e3:aa:bf:52:
         53:d0:58:73:5e:3c:d8:9b:4e:c1:a4:42:ee:c8:89:93:d5:e1:
         13:dd:d4:ea:53:20:67:54:a1:6e:3d:29:d3:25:cf:c6:fe:f9:
         b2:d4:82:e2:73:5e:80:72:fd:61:7c:20:9f:c3:cf:5c:04:3a:
         27:79:ea:cc:e4:d4:d3:66:0e:ca:2e:89:47:69:42:0b:8e:00:
         f8:6b:a9:6d:fc:39:e0:76:d4:39:a7:9f:f2:1d:2f:7f:18:91:
         8a:b0:94:4b:23:8d:33:01:77:83:8b:12:28:69:76:f4:50:c9:
         8a:70:32:42:82:67:68:a9:d1:ab:4a:75:3f:a1:38:b3:74:03:
         b4:bd:a4:e0:8d:d6:45:7a:cf:f9:8c:17:6f:9c:8e:97:71:c6:
         b5:d2:ac:d3:22:c6:95:06:08:2a:1e:45:6f:63:46:54:b5:5f:
         bb:a5:ac:89:fe:94:4e:0b:87:e2:08:64:b9:e7:84:9a:ad:19:
         14:1a:30:f7:4b:dc:56:bb:ca:c3:70:63:f1:b4:25:b0:da:34:
         90:c6:09:c7:5a:f8:59:2c:6c:f5:89:ee:62:5e:6b:95:c3:bb:
         59:45:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:01:55 2024 by rpki-client on console-fra.rpki-client.org