Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0bb34f-21f3-3eeb-b233-92805459a6d3.roa
File:                     7e0bb34f-21f3-3eeb-b233-92805459a6d3.roa (raw, json)
Hash identifier:          mFARmTlY/lrqUd3Cuy8YoU+fV+OK6BadzrNjxLQEE8c=
Subject key identifier:   DE:D6:50:09:86:10:93:E7:CB:CF:E8:5F:78:A7:4F:A6:64:C9:6B:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117013CA732EE352E92BD800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0bb34f-21f3-3eeb-b233-92805459a6d3.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.203.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:13:ca:73:2e:e3:52:e9:2b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=6a8799a8-00d6-4d9a-8a40-08816349ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:e9:91:f2:ec:d2:b1:50:5b:3f:40:40:c4:
                    a9:f5:e0:49:c0:7e:fa:55:da:f4:8e:92:e1:19:a4:
                    f0:34:f3:f3:bf:f1:53:42:b0:89:8b:ec:ce:72:0b:
                    08:9c:7c:e9:c8:a5:65:7c:71:69:b1:ca:44:25:59:
                    95:d3:66:12:b7:35:dd:3c:a9:56:bd:3f:2b:62:f2:
                    98:79:f1:b0:8c:4b:b8:23:65:c1:88:fd:97:f6:6e:
                    af:43:f6:ec:d9:1a:96:8b:64:03:54:8f:76:ad:0c:
                    44:cd:0a:6f:64:61:72:90:e2:47:ea:7b:e2:f0:e7:
                    b1:d5:cb:4c:89:78:30:5c:ac:a1:ed:da:b6:7f:b1:
                    ca:f2:23:33:19:9c:31:ec:6f:40:45:c5:72:a9:bb:
                    b1:8a:48:b6:be:38:43:d2:d0:d3:34:1d:1b:5f:a8:
                    ca:9c:88:0d:ac:1a:3d:49:74:14:41:1c:0b:72:43:
                    ef:d2:96:a9:ba:b8:f3:0e:e5:a7:6f:b5:fc:10:5a:
                    a7:41:25:97:46:f7:b4:0c:73:a0:1c:9c:51:07:f6:
                    91:4a:a3:8e:67:a3:83:a1:08:63:74:f6:b1:d7:db:
                    76:ed:ce:ec:b8:9a:72:30:79:84:07:36:43:81:c9:
                    b0:89:c2:55:3f:2e:b5:a0:5c:3a:e7:02:ed:25:ce:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:50:09:86:10:93:E7:CB:CF:E8:5F:78:A7:4F:A6:64:C9:6B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0bb34f-21f3-3eeb-b233-92805459a6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:77:29:cb:fd:33:ce:d1:a9:17:9a:e1:3d:36:73:4d:0e:
         86:04:90:e7:9e:62:69:15:7e:f6:f3:88:c2:32:94:bd:ea:8e:
         3f:7e:e6:59:93:b6:fd:e4:97:83:f4:b2:ff:56:a1:2e:6a:19:
         12:57:bb:12:d4:43:c2:e3:e6:a7:bc:9d:1b:af:47:07:f0:d2:
         e1:54:a5:e6:63:ea:9f:bc:4e:24:09:d9:2f:68:41:fb:c2:1c:
         ee:e1:69:11:d4:6d:c9:19:58:5e:92:6d:5c:b6:27:63:21:86:
         d4:e2:17:98:fb:a3:04:fc:e2:14:a3:85:55:9e:a5:38:26:78:
         ce:60:8c:dc:85:f2:1e:96:33:c5:f2:3d:b9:6e:ff:11:65:b9:
         05:7c:19:e1:8a:0e:53:1f:7b:8d:25:ea:77:49:2d:d6:96:f1:
         f7:a7:c9:8c:df:74:28:35:73:b2:c9:6f:be:4a:ed:96:1e:46:
         56:29:77:18:04:70:a7:d0:a6:8d:57:58:db:4a:50:04:7a:24:
         42:33:44:17:29:0a:c0:1f:f5:8c:1c:4c:71:aa:0a:4b:4a:99:
         9c:6a:25:34:48:e1:fb:c8:9e:08:72:e1:aa:63:75:d9:10:2e:
         09:e7:9e:5a:42:36:46:12:e5:2a:b1:8a:9c:54:ac:e2:d0:a0:
         1e:4a:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:05:42 2024 by rpki-client on console-ams.rpki-client.org