Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ec7009-755f-3183-9268-60e909ab9757.roa
File:                     97ec7009-755f-3183-9268-60e909ab9757.roa (raw, json)
Hash identifier:          S4gIuRh02kG7knwvDhj+azA8eqSBsRK3R0Dl7iwrFa0=
Subject key identifier:   F9:BB:B3:BC:A9:AD:38:24:8E:1F:0B:DD:A8:2C:98:DF:18:26:26:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB4EA44D71DE4DB9010040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ec7009-755f-3183-9268-60e909ab9757.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        73.164.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:4e:a4:4d:71:de:4d:b9:01:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=eb19b770-9f0a-4c36-89e3-9479f73558df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:ef:bd:dc:7e:2c:c5:f5:00:fd:c0:b5:91:
                    28:96:89:8d:7f:43:68:4f:35:d8:ba:fb:a5:b5:05:
                    7b:a4:44:29:cf:d1:e1:e8:f3:b0:54:9c:1b:2d:27:
                    b6:48:95:cb:ed:ea:93:71:a5:d8:0a:bd:78:bf:26:
                    24:7b:5c:f9:ca:c7:fd:94:d6:37:b3:66:2e:f0:3c:
                    dc:7a:63:07:56:7b:48:0a:9d:9c:fe:7f:2b:69:7f:
                    9b:ca:5a:4f:34:7a:af:a5:5e:7c:43:1e:4b:65:31:
                    05:23:e7:88:a8:45:a0:b7:0c:38:8c:80:bd:24:60:
                    a8:19:53:4e:48:90:34:c6:97:8f:db:64:15:16:53:
                    29:ef:e1:3c:8c:53:f6:50:62:73:f3:aa:d2:fe:d2:
                    37:c8:87:84:4f:4c:35:db:93:36:30:1c:f2:f0:46:
                    63:c7:02:96:3a:1c:c4:ed:47:82:47:4c:a0:d6:31:
                    5c:51:13:5d:ca:f8:17:be:11:c9:64:90:7e:42:80:
                    38:8d:03:7a:f3:51:ed:e2:ac:4c:ff:43:bd:4a:29:
                    ae:af:36:44:75:e7:af:37:3f:2b:a8:b7:f0:ff:5f:
                    41:59:69:48:96:99:e2:e5:f0:2c:1b:1a:df:58:07:
                    73:a4:b5:d9:e4:91:72:0b:fc:2c:7c:47:18:2b:d0:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:B3:BC:A9:AD:38:24:8E:1F:0B:DD:A8:2C:98:DF:18:26:26:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ec7009-755f-3183-9268-60e909ab9757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:08:fe:7e:91:02:fb:c1:cb:8e:0c:0a:cf:94:90:5b:97:1d:
         dc:3b:0a:d9:f4:85:42:8d:cd:c3:4f:59:4d:45:8f:2e:dd:b8:
         90:4e:53:55:67:a3:8f:5b:1a:4d:f6:91:26:fa:63:d0:67:cd:
         5c:fd:d5:7c:9a:8f:3b:4f:82:8a:1f:0e:8d:15:ca:2e:5e:54:
         6c:49:ba:84:d9:c2:2f:b5:0b:47:0c:b3:90:fc:f5:0b:a2:f2:
         52:ec:16:9b:de:30:f0:ef:04:8c:73:6d:cd:ab:81:17:ef:b6:
         c3:b7:1a:a9:91:f9:4f:00:c6:6d:02:e4:38:26:34:89:8b:99:
         6d:5d:95:5c:af:7a:14:3e:d0:59:6e:67:f3:b8:43:26:02:69:
         5f:95:e4:15:3f:dc:7e:27:41:16:49:76:a5:a2:d3:3c:48:cc:
         9e:a3:d8:55:a2:b4:55:bf:c9:3a:31:9c:bc:ee:bd:3c:a2:73:
         09:b8:bf:3b:e7:1e:14:85:fe:1d:46:00:6a:6e:f1:2c:d7:65:
         5a:c1:4d:9a:3c:35:e5:47:e7:29:27:9e:6a:f9:e7:0f:ac:82:
         13:47:ce:89:71:d6:36:28:5e:14:2f:9a:ec:26:c3:01:c1:a7:
         76:b3:62:2b:20:7b:ae:68:6b:06:21:eb:b3:af:fc:d7:1e:36:
         3d:9d:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:09:54 2024 by rpki-client on console-ams.rpki-client.org