Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd6a058-a3f9-32ff-b509-6b444a9cb0f7.roa
File:                     8dd6a058-a3f9-32ff-b509-6b444a9cb0f7.roa (raw, json)
Hash identifier:          9zi0VWyAkaGxYa4Tm/rO3wl9m1s2uJWxskdC9hUj1xU=
Subject key identifier:   87:BC:A4:45:FC:2B:6C:64:52:A3:D4:27:BB:68:3B:E9:79:A7:1E:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9ED8EA42E50675AAD58480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd6a058-a3f9-32ff-b509-6b444a9cb0f7.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        73.188.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:d8:ea:42:e5:06:75:aa:d5:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=12eb9f6e-6b96-4b86-8bbd-66910808d8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:4c:0e:fe:c1:d9:5e:a5:62:c0:49:13:ee:
                    e9:aa:84:f4:d5:ca:68:80:da:42:d5:c5:22:7f:16:
                    62:0f:7b:7c:32:cf:86:39:fc:20:14:af:ab:d7:ea:
                    03:3d:5a:8b:25:0e:24:1c:19:66:84:4f:88:cb:fa:
                    ba:d2:64:cd:bb:4b:42:1e:00:0a:1b:66:25:8e:f9:
                    56:ca:33:97:69:33:8e:83:5d:ab:1b:cc:5b:cd:42:
                    a5:af:05:1c:9c:6c:f3:90:43:a9:b6:d1:cb:51:2b:
                    bd:df:4f:50:dc:34:68:78:08:5c:be:3e:86:f3:45:
                    2d:71:20:39:1b:c1:00:f4:46:a3:e3:a5:20:4d:4a:
                    4e:35:66:6a:ad:3a:2c:11:45:8c:b5:b7:91:90:7f:
                    4a:ba:2d:b4:e9:27:4e:dc:0c:1c:85:4a:dc:a2:9a:
                    3f:50:44:17:3e:40:64:62:d1:2b:96:a5:ad:3b:16:
                    a6:9b:67:dc:5f:47:76:23:93:b7:2a:3d:50:6e:4e:
                    ab:53:ee:2b:e3:50:f6:6a:90:06:30:45:bd:a1:98:
                    be:58:aa:91:d9:f0:88:90:f5:90:a2:2a:f3:bd:a9:
                    d9:15:d1:27:47:69:3b:75:3d:6c:ce:56:de:e3:39:
                    78:48:72:3a:5a:57:8a:9c:25:5c:62:b9:7e:ca:c6:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:A4:45:FC:2B:6C:64:52:A3:D4:27:BB:68:3B:E9:79:A7:1E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd6a058-a3f9-32ff-b509-6b444a9cb0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:23:30:ae:27:3a:54:fc:44:8d:09:5d:3e:c2:41:16:ac:e0:
         75:db:f5:a4:89:34:d2:9b:e1:62:75:b6:cf:6a:ec:ec:86:d4:
         cd:99:98:af:76:87:f1:27:0c:22:b7:08:68:2d:78:6f:3f:24:
         36:7d:04:cd:d4:fc:a1:10:3d:06:bf:2b:c9:21:a0:0e:ce:4c:
         32:9d:ac:f3:f5:30:dd:f8:c0:aa:77:1c:61:22:51:6a:ff:1f:
         99:13:42:93:c7:f2:86:2f:3f:fb:d9:47:7d:0f:82:b8:40:b7:
         36:fe:fd:5e:46:1e:88:ae:f3:cc:e7:06:9e:40:65:ac:33:f8:
         64:43:d5:65:3d:9a:18:1e:6f:41:0e:d5:df:10:ee:1f:2a:e3:
         f8:ca:7d:3e:f5:4f:d7:eb:6a:d7:35:27:ca:93:23:68:38:dc:
         91:69:98:21:91:05:e7:a1:e2:c2:10:de:ef:05:60:61:f3:80:
         b7:69:fb:df:67:e6:ac:f1:3c:0f:34:d9:1d:48:53:0a:13:70:
         34:0a:8e:51:05:0d:ed:89:77:85:3e:b0:07:ff:47:77:b2:70:
         54:6c:ec:9c:2c:1a:17:9a:97:83:86:99:ec:1d:13:92:ee:24:
         41:c4:24:db:67:32:ac:ab:e5:e0:a0:ed:96:6c:7f:ae:47:02:
         28:5b:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:35 2024 by rpki-client on console-ams.rpki-client.org