Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa
File:                     90e49523-1912-3830-b44c-731c31a74c63.roa (raw, json)
Hash identifier:          cNO/KUDBF0vIT2jvcjj8ncdDoeplh6HEfT6POLqs0jw=
Subject key identifier:   BD:B5:F8:67:6D:CA:0B:3C:22:9C:7C:8D:25:41:81:74:A4:65:6D:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5E6258AD4F0FDAD65ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.122.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:e6:25:8a:d4:f0:fd:ad:65:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=b1d8bd42-8b23-4656-a5f4-b28c22aa1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:47:a2:45:58:b4:bc:f0:ca:c2:c7:fd:0d:
                    09:e6:5c:f5:f5:32:95:c8:e1:b6:c3:3c:23:46:a1:
                    7b:62:fd:56:7f:b3:17:3f:8d:50:fb:b6:d3:49:a9:
                    2c:f4:e2:78:da:68:5a:28:67:00:47:03:4a:ea:28:
                    59:74:cf:65:f8:8a:5a:a0:41:41:de:c7:b3:68:64:
                    f8:9a:fc:6d:d2:06:f4:0a:6e:51:98:d0:83:92:f2:
                    5a:69:76:61:15:d5:1f:38:2b:f1:34:ab:dd:90:0a:
                    a6:73:28:39:9f:c5:d3:f1:ac:92:67:29:d8:f7:ee:
                    90:34:9f:1b:f3:d5:96:87:c2:22:91:c3:07:dc:f6:
                    9e:34:a5:97:9f:b1:ad:b7:2a:fd:17:73:17:ee:68:
                    90:3e:68:3a:93:8f:b6:07:12:d2:6f:b6:70:82:4c:
                    c1:f1:52:4b:1e:6f:da:83:21:ce:68:6e:c3:24:d5:
                    30:3c:1c:45:97:63:fb:2a:de:ca:44:8a:ff:c4:ad:
                    15:2d:69:36:96:47:f5:f8:8a:63:b4:f6:37:88:6f:
                    a0:82:c5:6c:0b:ef:5b:43:78:a5:33:40:29:29:da:
                    a9:0b:1d:a0:8a:ca:aa:1e:12:d2:f8:d7:dc:8f:fd:
                    b3:95:d4:bd:2a:bc:db:05:b1:94:ec:d5:92:7b:c2:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:F8:67:6D:CA:0B:3C:22:9C:7C:8D:25:41:81:74:A4:65:6D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.122.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:99:40:37:ca:c3:07:e2:9c:65:77:bc:78:57:14:35:de:3a:
         c6:ac:ba:a2:63:2b:0b:60:ad:fc:9d:af:e4:ca:4f:86:45:95:
         44:83:d2:ec:ea:a1:8d:c7:7c:8c:d8:43:52:63:ad:56:b8:6e:
         48:50:4b:ac:62:ec:ed:eb:e0:19:fd:2f:48:25:57:2d:5d:cb:
         28:11:8a:20:2e:52:9a:7d:2f:d8:b1:44:7c:ed:a5:5c:95:96:
         a7:97:d2:18:12:88:9c:30:fb:c9:cb:9e:fc:9e:24:20:64:a6:
         35:1d:7a:10:9a:75:2a:e1:b1:d6:a3:2a:5a:dc:1e:ea:af:96:
         91:a6:c2:dd:a7:59:ab:e9:8d:9b:d2:0f:e8:d5:34:4d:06:cd:
         73:25:19:18:66:21:c1:1a:e4:b9:71:e9:ee:24:a3:3b:49:22:
         f5:36:02:c4:48:7b:04:28:45:18:ca:71:bd:bf:40:67:e8:c8:
         76:68:fb:85:f3:9c:1e:93:52:30:f2:7b:4f:f8:b6:c2:2a:2d:
         75:42:77:32:d3:5d:52:e2:45:56:40:45:e2:4c:57:bb:76:3b:
         52:d0:21:d1:de:61:ff:42:77:e7:6f:e4:66:f0:b6:f2:e6:bf:
         13:cb:3a:19:d3:85:49:28:83:1c:6f:82:1e:b6:f6:5e:30:31:
         12:be:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:21:51 2024 by rpki-client on console-fra.rpki-client.org