Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c817c38-b8cc-3e43-8bfb-8c0e765000b3.roa
File:                     8c817c38-b8cc-3e43-8bfb-8c0e765000b3.roa (raw, json)
Hash identifier:          dxPwoCWkfO0DXMB0T+3wnA5cQFMMqSooWF962OSu6gA=
Subject key identifier:   4E:9A:6A:DD:D2:80:3E:03:4A:CC:E1:F6:A9:C3:C8:5D:B5:8B:51:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89A62C88D6888B0DCDED40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c817c38-b8cc-3e43-8bfb-8c0e765000b3.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.160.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:a6:2c:88:d6:88:8b:0d:cd:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=bf69a4d2-040f-4e10-9529-64cd4137d130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:fd:f1:de:f0:b5:d6:00:8c:53:eb:28:c2:
                    9f:6e:ab:4b:14:b3:29:34:7d:39:1f:a3:ef:c6:d6:
                    9f:38:18:25:d0:02:0f:9c:98:0b:58:a0:c0:aa:c6:
                    fc:42:d8:f7:63:ba:c5:b1:2b:a3:f7:9f:af:50:b6:
                    77:1a:f0:f0:6f:13:af:0a:a5:0a:a6:a4:c8:48:1d:
                    bc:f0:09:9e:67:0e:2d:df:96:a0:8b:12:75:5b:76:
                    17:00:7c:54:2c:df:f5:f8:ca:99:81:04:0f:dc:ee:
                    c5:02:f6:cc:a2:3d:6c:f2:2b:a4:ef:78:bc:9b:39:
                    de:c8:ca:b3:11:58:8c:b5:60:63:3f:1d:d9:04:10:
                    a6:87:40:4e:eb:ba:8f:ab:5a:c7:26:f0:46:f6:68:
                    39:01:19:ed:c5:3f:29:6d:d2:31:f2:ca:84:be:d6:
                    32:86:01:92:57:a1:75:f6:6e:4a:6b:ab:bc:67:11:
                    c5:f4:15:be:77:b8:16:6a:07:e6:7c:92:3b:e1:82:
                    e1:9c:f8:d1:0f:34:45:ee:82:20:30:a7:1c:85:aa:
                    0a:e9:7e:a3:1c:0e:f2:bd:d8:08:1a:9d:fa:16:00:
                    0e:a4:9a:22:6e:7a:e6:9a:ae:25:40:92:ce:6a:7d:
                    aa:2b:3a:fe:23:b7:b6:70:25:31:04:03:2e:23:a2:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:6A:DD:D2:80:3E:03:4A:CC:E1:F6:A9:C3:C8:5D:B5:8B:51:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c817c38-b8cc-3e43-8bfb-8c0e765000b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:33:4d:86:80:a0:76:f2:21:fc:5e:f9:9c:50:fc:fd:95:
         d3:5f:de:01:00:c9:6a:4a:53:e9:1f:1f:ad:53:bf:68:da:c8:
         9c:33:71:65:0f:41:3f:b0:dd:cb:56:40:10:fd:a3:eb:57:95:
         3f:de:33:05:2b:8e:ae:9c:8c:8b:92:81:fa:2f:e0:df:ff:46:
         0a:11:0b:22:9c:d1:73:3e:c0:85:dd:d6:9d:65:c5:03:e9:14:
         f6:59:eb:0c:9e:31:8d:76:00:65:84:b2:8b:f6:01:cc:d6:a5:
         31:51:1b:ff:de:56:da:15:09:75:f8:b8:e4:6a:bd:93:7d:3b:
         6e:70:0a:a5:e1:93:92:da:42:f9:f2:a2:ec:1e:f0:67:17:6a:
         e8:78:ba:bc:31:cc:cd:84:b1:9c:88:7f:56:b0:0d:50:14:bf:
         c5:73:54:ca:ed:c1:90:50:b5:fb:8f:7e:a7:61:c6:f2:7a:23:
         ff:3b:49:24:13:d7:4c:40:9c:76:1c:29:41:67:0d:89:8e:05:
         f5:a3:1f:5c:5e:c9:ea:79:b2:63:0c:70:dd:33:4e:65:d0:59:
         b0:cc:ff:ab:cf:22:53:f0:95:34:84:a6:40:20:62:30:2b:54:
         95:13:84:8a:20:f3:7a:d7:2e:6a:0f:1c:48:a2:bd:f9:84:46:
         c0:67:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:31:40 2024 by rpki-client on console-fra.rpki-client.org