Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3eb190-afde-3c14-abf6-2afa5eb3dc43.roa
File:                     7d3eb190-afde-3c14-abf6-2afa5eb3dc43.roa (raw, json)
Hash identifier:          vl2D3MZa34dRbCLVwVlTLEyirnGCKMk9eBQoX/vMv9s=
Subject key identifier:   BF:A8:FF:EC:CB:43:E3:B9:99:CD:7D:B3:E4:DB:89:06:FB:C9:39:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC897CDCAD7956B3D5A6ECC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3eb190-afde-3c14-abf6-2afa5eb3dc43.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        73.98.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:7c:dc:ad:79:56:b3:d5:a6:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a1fb03db-57f1-45c1-a4ae-b61b12aec5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:ce:5d:c1:64:28:ef:76:01:9e:d6:d3:19:
                    5c:6a:71:b8:fb:98:b4:94:ec:2e:f8:f4:51:b3:ca:
                    ab:6a:2f:e8:f4:bf:0e:46:eb:7a:bd:4a:15:87:82:
                    53:5c:fe:2c:1b:b9:ec:ec:2a:c5:4b:be:b9:ee:a5:
                    d0:1d:ce:b9:5a:17:dc:d4:c8:2d:6d:66:32:b8:f6:
                    88:74:9d:a2:77:ca:df:72:4f:5b:01:56:c1:0b:54:
                    a0:7d:4f:b0:fa:77:7c:ea:7b:60:15:33:42:31:7f:
                    6d:3a:3f:14:aa:42:91:9b:95:31:36:53:5b:70:1c:
                    52:d9:85:26:ad:de:7b:7b:93:ec:50:90:01:e8:7f:
                    2e:47:21:23:0e:48:d0:2b:ed:34:3e:bb:68:65:f8:
                    3a:0d:b5:c9:f1:8b:9f:7e:e6:35:03:a3:fb:0f:0c:
                    5e:e9:cf:34:e5:90:d9:42:f9:dd:fc:71:54:10:16:
                    5b:cf:84:a4:46:ee:6f:2e:f3:07:0f:9d:e6:7b:2c:
                    85:18:9f:3d:1a:4a:e0:43:eb:df:9f:3b:8f:b7:75:
                    1e:ac:a4:c7:33:4c:74:71:41:1e:04:f3:f6:45:c9:
                    d4:bc:da:3d:4f:90:bb:7e:9a:52:ae:02:a0:f8:62:
                    d1:62:64:36:77:7f:da:ec:ac:d4:e9:72:10:ea:47:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A8:FF:EC:CB:43:E3:B9:99:CD:7D:B3:E4:DB:89:06:FB:C9:39:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3eb190-afde-3c14-abf6-2afa5eb3dc43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.98.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:40:b7:e7:99:7b:9b:fd:12:63:db:17:2f:0f:5f:c6:53:
         25:9f:7d:33:8c:85:f7:9d:12:a0:0c:81:0a:c9:91:36:2e:f7:
         15:17:86:64:82:04:4d:68:6f:f7:81:bd:69:9e:46:ed:57:11:
         f6:6c:21:17:1e:6a:62:5a:eb:4a:b6:19:d5:59:b5:da:a4:cc:
         70:5c:2b:3e:0c:4b:ec:e7:20:7a:58:ce:7b:a8:31:6e:47:0e:
         94:04:6d:df:51:f4:91:93:6e:ea:a8:7e:45:64:1b:55:8e:da:
         8d:45:5c:9e:8b:00:7a:ec:42:76:82:98:84:47:0c:20:fc:ef:
         94:ff:d1:72:4f:a7:47:4a:0c:93:1d:eb:15:32:97:a9:79:e8:
         58:03:a8:eb:a9:dc:40:8f:fd:72:98:b8:40:b9:cb:6f:4c:73:
         a2:ae:8b:c4:7c:64:14:b8:2b:11:7f:68:79:64:59:a8:70:f3:
         fd:cc:91:cb:c5:2b:2e:91:ec:56:a3:c6:10:35:6a:64:68:cf:
         ec:4d:21:29:df:1e:39:8b:c6:65:9f:24:4b:bb:a4:2c:3f:2b:
         e7:34:55:b7:61:42:97:fa:02:d4:ee:b6:24:85:6a:2a:b4:fe:
         a4:f4:dc:34:1d:f7:63:01:e3:5b:39:42:ad:98:62:56:86:5d:
         bd:64:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:18:37 2024 by rpki-client on console-ams.rpki-client.org