Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6838fa-0495-322d-936e-297226cdd9b0.roa
File:                     7b6838fa-0495-322d-936e-297226cdd9b0.roa (raw, json)
Hash identifier:          96WgIY4aImjP7buzRJRAwoJFZFrsA2Ezk8zW4xA6Mf4=
Subject key identifier:   3B:47:9C:7E:40:33:EC:CB:F9:C6:28:B6:86:C7:CD:39:C4:8A:56:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8279219D66E0AABE28DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6838fa-0495-322d-936e-297226cdd9b0.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        73.6.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:27:92:19:d6:6e:0a:ab:e2:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d0be90e4-8d87-433d-b6f9-8da0b7c91afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:4c:16:71:7d:83:fe:fd:a1:b6:85:fc:dd:
                    73:40:bd:a9:a2:15:fa:ef:20:b3:b1:a2:5f:49:b2:
                    7d:8f:fa:9a:25:db:37:27:b7:c1:a6:11:6f:f9:c4:
                    3b:0f:af:77:1e:5c:b9:b1:bb:a5:3b:7a:fe:ee:35:
                    25:a9:5f:e1:e1:28:ed:f2:5e:2a:9f:c7:5b:fd:96:
                    a7:c7:36:7f:62:70:bc:e3:f6:37:1d:c1:77:95:bc:
                    16:87:28:f2:39:8e:97:f4:79:64:12:bf:7b:05:fc:
                    59:2b:c5:86:17:7f:02:70:8d:85:a4:7c:50:0f:0a:
                    da:57:73:95:8a:b4:31:1c:c0:a4:19:52:d5:00:7e:
                    b7:89:c2:ca:b7:66:65:a0:3a:17:2b:30:e3:a4:ff:
                    70:cf:b4:14:ea:6c:e1:1c:1a:6a:d5:dc:6f:15:28:
                    5c:f7:f8:ab:32:0e:7f:d7:fc:75:55:ed:1c:32:49:
                    13:99:4d:05:37:30:89:7e:3e:d2:96:2d:6d:a0:62:
                    db:8a:36:6a:58:3d:8b:9e:90:f3:54:f8:c3:0b:8a:
                    c1:27:ac:e0:59:93:e6:dc:74:cc:fc:e2:43:5d:b2:
                    30:0f:f9:d2:e0:a7:54:7b:37:55:19:39:bb:75:bb:
                    e1:35:a1:bb:a5:87:32:f3:77:a7:49:ae:f0:98:8b:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:9C:7E:40:33:EC:CB:F9:C6:28:B6:86:C7:CD:39:C4:8A:56:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6838fa-0495-322d-936e-297226cdd9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d8:e4:16:97:8c:3f:3b:d5:55:da:54:23:5a:0c:9f:32:a1:
         25:0d:b7:3e:85:22:e0:55:99:a7:d4:08:58:a0:fd:7e:30:03:
         81:e4:4f:6e:e5:93:ec:73:6f:c7:8a:0f:91:9b:46:5e:4e:89:
         4d:c2:a1:b6:68:26:90:05:cf:9f:94:8a:84:b3:c9:88:ec:91:
         52:e9:8c:fb:e2:12:25:e2:a6:9f:4b:ff:28:12:3e:e9:b7:54:
         49:36:48:82:dc:cb:2c:3b:d0:a8:00:6f:08:43:22:a1:9a:8f:
         c2:9c:98:31:78:3d:a7:e3:f8:06:8f:b5:a8:62:0a:b0:34:09:
         ce:2a:27:91:10:6b:3d:74:31:31:d1:11:eb:68:87:46:7a:4f:
         a9:ad:7e:c4:28:2e:2f:e4:71:79:97:6f:07:fe:64:ac:e1:9d:
         f7:fe:31:10:5d:fa:57:2f:8f:c4:25:d0:bc:49:f0:68:a5:e7:
         83:0f:e4:62:28:2b:e8:58:d9:40:12:b9:59:05:fd:97:f7:d6:
         19:0e:78:c1:33:2b:c2:e8:61:a8:87:04:f9:b5:a5:ce:6a:8d:
         d9:ce:45:ec:ae:31:60:a5:89:42:b2:b0:19:1a:8d:84:9c:f0:
         40:64:b8:b4:ae:3c:06:43:bf:fb:0d:9f:58:53:d2:37:0f:49:
         4b:6a:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:39:12 2024 by rpki-client on console-fra.rpki-client.org