Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9446e262-bf6e-339c-ada2-f6989def2644.roa
File:                     9446e262-bf6e-339c-ada2-f6989def2644.roa (raw, json)
Hash identifier:          nv7sABec7hTpXIVNjNul0PfzfSCCa8pey5gBkDqmIAE=
Subject key identifier:   B9:40:DF:F9:C2:7E:A5:D7:AA:99:A3:7D:E7:A1:1A:19:B6:6B:ED:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5EF18FE035A383E1053C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9446e262-bf6e-339c-ada2-f6989def2644.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:ef:18:fe:03:5a:38:3e:10:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=deb6c4a9-50fb-4a09-ad31-d61a545e6079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:fb:32:4e:f7:70:cc:2e:64:73:a8:b2:1f:
                    b7:86:74:23:c2:3b:38:fc:83:3f:41:b6:b1:d3:97:
                    01:61:6c:d1:c8:bd:f9:00:31:f2:9a:02:b1:60:a9:
                    12:88:75:dd:f4:28:9f:f6:1d:3b:59:18:bb:24:00:
                    c0:23:fe:41:d8:ff:7a:c4:d8:fd:c2:0f:2c:92:ee:
                    61:53:53:aa:aa:1b:97:b6:d8:23:8d:c6:24:76:67:
                    20:a9:8d:1c:fa:3a:5d:1e:a4:4b:1d:e9:ce:88:92:
                    f5:99:56:7d:76:5a:55:9c:46:23:c3:e5:af:c6:57:
                    bb:5d:4d:73:cd:14:55:c7:93:90:2f:17:12:23:30:
                    64:d8:60:64:ff:2f:f7:71:e5:9d:d4:37:b7:96:2d:
                    b3:01:64:5b:22:ca:7f:d8:9b:36:8f:71:c7:67:3a:
                    58:70:30:33:a9:1d:a5:48:49:7d:87:06:11:fa:e7:
                    d3:85:32:23:ce:3b:96:68:5e:2b:67:ae:9c:0f:83:
                    be:73:88:52:99:8c:93:6f:be:4d:9d:e3:6d:96:51:
                    49:1e:92:bc:0e:49:9f:56:2e:2f:a8:dc:af:3a:d1:
                    2c:b2:72:e7:de:ed:e6:26:54:f6:18:ad:4e:f1:77:
                    ec:64:fb:5e:6f:a4:0a:82:e1:aa:83:67:ae:52:9a:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:DF:F9:C2:7E:A5:D7:AA:99:A3:7D:E7:A1:1A:19:B6:6B:ED:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9446e262-bf6e-339c-ada2-f6989def2644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:09:14:b3:9e:84:f7:b4:a1:79:0a:3d:d5:52:52:1f:c2:
         ab:52:9c:16:dd:21:17:43:39:9a:5a:61:73:de:4c:3a:98:50:
         be:6b:04:2d:a5:c9:06:e5:9c:4b:88:4a:bd:9b:68:09:c0:e2:
         f4:75:82:cd:be:8c:0b:95:7d:88:81:c4:e9:1f:ac:28:4b:23:
         3e:cb:d0:ce:15:b6:a6:f4:7a:50:5f:89:03:b7:2f:7c:27:b3:
         94:c1:ce:b2:10:6f:71:f6:7f:4a:a1:82:fa:0c:55:1b:82:96:
         f3:90:9a:21:46:34:93:98:51:e9:1f:c4:24:94:11:47:28:60:
         e3:55:56:96:b4:76:f8:4c:ba:f8:d7:db:d3:cf:aa:bf:5d:23:
         95:77:4e:d3:18:a0:b3:e7:95:8e:2b:ea:1d:0b:5f:cb:d7:b2:
         57:bd:05:a6:83:d0:e6:ec:62:af:4c:aa:77:68:08:73:ae:4a:
         08:75:39:8c:da:52:82:cd:39:7b:c1:ef:74:97:83:14:ef:cb:
         a7:9a:8e:a7:34:0d:20:d9:bc:85:60:db:12:3a:e8:00:21:dd:
         c0:bf:9c:21:46:c2:85:b6:83:19:cb:e6:1f:e3:d8:93:5b:4f:
         f5:9b:d8:52:f7:26:13:5c:39:de:97:3c:cd:12:ce:47:a4:d5:
         70:16:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:09:20 2024 by rpki-client on console-ams.rpki-client.org