Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ded3e24-c7ba-3545-8c2c-0599309bdbb3.roa
File:                     7ded3e24-c7ba-3545-8c2c-0599309bdbb3.roa (raw, json)
Hash identifier:          EjoPP0RnPvfss2K7Suxk9m28RN3hSnAsflaT1cRdRfk=
Subject key identifier:   E2:B6:C1:61:26:58:10:04:0C:AE:90:40:C3:E5:52:58:A4:97:3E:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D57423B020A5084A69B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ded3e24-c7ba-3545-8c2c-0599309bdbb3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.63.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:57:42:3b:02:0a:50:84:a6:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=1a40e981-ac65-4669-830e-00dbd511fd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:a1:c7:e3:ad:4e:20:45:0b:fd:00:72:28:
                    25:25:27:49:d5:8c:b3:1a:95:c2:42:aa:8c:b3:84:
                    b3:44:7a:a2:78:d4:69:8c:99:a3:b1:31:91:cc:e1:
                    a2:56:a7:aa:b9:b7:20:bd:23:a1:6f:63:28:64:06:
                    ce:2d:60:6d:57:d7:d9:d9:51:02:a9:58:6a:a9:5e:
                    54:cc:60:75:d8:0d:12:75:7e:9c:c6:a8:6b:98:ee:
                    95:1c:ad:b3:ab:61:9f:16:8c:8d:a0:36:9f:4f:55:
                    18:aa:a9:b3:54:d5:e4:b2:32:0e:f2:bf:bc:8d:e7:
                    7b:32:33:74:ca:90:0c:52:64:ed:b8:46:f8:d2:3e:
                    c1:5b:d4:1d:aa:c4:63:e1:59:93:12:31:b2:f0:75:
                    5d:5c:dc:64:11:b1:08:25:63:fe:cb:74:9a:46:f2:
                    b9:02:df:ee:d8:6a:d5:e5:83:b6:c6:30:c2:0b:b4:
                    b8:02:09:06:7e:00:89:36:cd:38:0e:1d:76:d1:c5:
                    f8:8a:9a:68:29:41:17:92:e9:d0:b0:16:bf:b4:23:
                    80:20:e6:cd:6f:53:a1:57:01:f9:0a:1f:71:0a:bd:
                    b6:fb:10:5f:18:b7:9e:95:3b:f8:0b:c2:81:6f:30:
                    82:84:ae:80:5b:a5:10:19:7b:c0:dd:c0:72:b2:d5:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:C1:61:26:58:10:04:0C:AE:90:40:C3:E5:52:58:A4:97:3E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ded3e24-c7ba-3545-8c2c-0599309bdbb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.63.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:36:87:6e:92:c5:22:8d:df:c1:7b:0e:d4:2e:fa:6e:c3:
         90:35:af:02:ef:60:eb:57:0a:2b:31:af:da:5a:50:27:40:d3:
         d5:56:51:da:a1:31:8b:e7:65:de:94:c1:25:4d:38:bf:5b:f6:
         2f:f2:50:ed:ec:46:d6:30:4f:be:04:30:c4:88:85:1c:36:51:
         5b:c2:ce:fb:bf:8d:c6:0a:7c:11:12:61:74:1a:f0:5d:0b:e3:
         dc:1b:24:75:d1:72:d7:6e:54:77:04:c5:c3:2b:1f:3a:cd:4a:
         4d:db:3d:bf:5b:3e:2c:bb:35:9d:2b:c1:aa:39:3e:e6:10:4a:
         f5:bc:7d:09:f2:e7:ff:78:e2:05:19:fa:93:97:2d:6d:81:7c:
         84:a3:a0:ff:08:b6:50:6e:db:a7:ad:36:8a:14:7b:28:3d:35:
         25:1c:96:0b:e8:f3:15:b5:0e:0c:02:a2:9c:ee:58:bf:aa:b0:
         17:aa:d2:d7:7b:a3:42:be:85:52:5f:6f:d0:09:68:8b:ae:54:
         61:4a:47:5b:61:3f:8d:f9:73:7b:35:83:77:e6:11:57:c7:ca:
         f4:51:c1:55:c7:c6:2a:2d:c3:24:bb:00:ba:6e:22:d2:c6:16:
         77:b4:ae:4d:08:a0:6b:e4:6d:5e:55:e7:c9:ce:b1:0a:05:2d:
         94:3d:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:28:34 2024 by rpki-client on console-fra.rpki-client.org