Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807f2fb7-d292-3ab7-a93e-8716dc541e49.roa
File:                     807f2fb7-d292-3ab7-a93e-8716dc541e49.roa (raw, json)
Hash identifier:          oOUSZ7QXXJL9IzrANyb6ylX4hov8bbpCMiB2pSa8Uh8=
Subject key identifier:   E9:1C:2A:AE:AD:03:89:72:75:55:29:AC:4F:7B:C1:C7:50:8D:5B:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E8B8958D3597942E7C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807f2fb7-d292-3ab7-a93e-8716dc541e49.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.194.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:8b:89:58:d3:59:79:42:e7:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=686fe099-c920-4913-a12f-d84cb17858b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:3b:d9:01:37:86:15:92:ce:45:4f:18:42:
                    09:97:51:d4:27:06:d3:17:3f:80:b1:09:19:25:8b:
                    11:98:1d:75:e4:83:82:8f:a4:35:ec:46:12:26:7c:
                    c1:f8:a4:04:4a:24:de:cf:27:be:4e:48:17:1a:c3:
                    42:69:2e:cf:be:ed:da:9c:8e:fc:78:3a:ca:34:51:
                    f2:41:69:e8:4e:dc:71:f8:1c:78:72:69:66:11:c3:
                    27:b2:2a:a2:b0:50:44:4e:8d:ad:35:02:16:73:53:
                    83:88:c4:f4:58:9e:a7:a7:b6:9e:10:e2:0c:a9:a7:
                    d2:8f:ae:0f:3d:e1:26:fa:18:d3:2c:00:3e:b5:70:
                    40:18:8d:50:61:de:39:d6:4c:e4:28:ce:08:47:14:
                    6e:e3:3f:98:25:3c:ac:5d:ed:e4:1a:ef:f1:56:c0:
                    99:72:89:e8:e5:d2:5f:2b:98:6d:24:68:76:ba:e6:
                    7a:6d:37:82:ef:f4:62:96:e4:88:1e:8d:ce:29:e2:
                    c2:96:1b:d0:57:69:80:ad:54:05:cf:ee:22:c5:98:
                    0d:cb:5f:0c:80:53:a8:36:2e:8a:83:b6:19:55:fa:
                    dd:a7:97:63:1a:9b:ac:b8:24:6e:73:b5:d0:23:ce:
                    71:4e:b1:5d:7a:4b:3c:b3:51:91:66:91:c1:76:99:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1C:2A:AE:AD:03:89:72:75:55:29:AC:4F:7B:C1:C7:50:8D:5B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807f2fb7-d292-3ab7-a93e-8716dc541e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:61:5d:8c:5d:03:46:f1:7f:dd:51:65:17:c8:65:4c:b9:
         74:6c:c3:02:1c:9d:fe:99:6a:1f:3e:fe:d3:c5:84:ee:97:f5:
         44:dc:05:e6:7e:1a:49:15:52:f1:42:82:61:1c:4f:a9:27:c3:
         6f:30:ee:ee:6d:b8:9a:09:29:7f:3f:f4:fc:74:40:75:c9:9c:
         50:d0:6d:ba:4c:f9:09:23:97:af:88:e0:75:9d:c7:0e:1f:be:
         f6:97:0f:63:6d:3a:30:e8:85:2b:ae:08:ab:80:f2:e4:32:58:
         6c:7f:db:80:1b:98:e3:a7:7b:23:21:77:b9:9c:b4:39:28:1b:
         9f:aa:15:a6:fc:3e:73:5c:41:6a:90:1e:70:5e:f0:d3:2d:f8:
         8a:45:82:74:28:96:c8:60:af:08:65:71:63:86:61:18:08:93:
         2e:40:18:dd:4f:50:e7:8d:02:d7:7e:2e:ea:ca:b9:77:3d:4e:
         e0:0c:2a:ca:3c:fe:da:e6:29:e4:67:5b:3b:a0:b4:c8:d7:bd:
         a4:47:c9:82:f2:81:b4:55:90:d3:79:ed:ef:8d:3c:1d:71:88:
         08:bd:a7:9a:f2:70:41:e4:43:e8:2d:b5:cd:6b:12:36:c6:a4:
         d6:83:22:17:ca:ff:14:05:ec:be:07:62:81:8f:2d:b8:b5:a9:
         29:9d:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:59:33 2024 by rpki-client on console-ams.rpki-client.org