Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d649e6-0b1f-3562-8ecb-bc5b227fc919.roa
File:                     98d649e6-0b1f-3562-8ecb-bc5b227fc919.roa (raw, json)
Hash identifier:          Nlxn8g71TJPrNDbAjRGh+LW1rIM1Fvi7HoCLzZx0FSM=
Subject key identifier:   F4:E3:C2:C0:91:55:EA:BF:94:C4:B8:C9:33:D6:C1:E3:63:86:EA:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5844ED847A16A3AC4DA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d649e6-0b1f-3562-8ecb-bc5b227fc919.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.137.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:84:4e:d8:47:a1:6a:3a:c4:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=845fd0b3-390f-4954-b74c-a73568f9a201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:04:67:6f:6d:69:94:6a:68:4a:11:ba:6b:
                    73:bc:7a:65:cb:5c:7e:f7:53:b1:7d:e2:55:6c:1e:
                    52:9b:36:83:12:20:0a:87:55:d8:0e:1f:25:25:97:
                    d1:56:51:05:00:60:7b:cb:96:78:3e:18:df:a3:14:
                    4c:8d:42:e2:1c:c9:b6:4e:a2:e3:53:7f:ec:e1:87:
                    05:fe:34:41:af:0c:6c:b7:ef:f4:03:d9:e2:78:90:
                    97:e9:88:dc:a3:7f:6a:a3:a7:93:a7:10:f8:72:81:
                    35:3c:f7:51:09:5e:35:1b:0a:98:3e:e6:1c:03:9f:
                    7a:85:e0:9b:1e:cc:d5:b7:ff:fb:fe:72:75:26:c6:
                    d4:6b:b2:ba:ee:55:47:53:19:9e:03:d8:ae:7e:a0:
                    d3:86:5c:d5:2c:2d:9e:27:8a:a2:4a:2d:87:96:18:
                    ca:5b:02:b6:55:c6:5d:c0:53:45:0d:43:b5:3d:d7:
                    10:32:12:41:5c:e8:56:19:95:0b:29:13:10:05:e6:
                    4a:88:2b:f5:b2:53:c4:c5:99:4c:22:87:da:14:2f:
                    ea:75:47:8f:96:a6:6b:e8:f8:c4:25:94:87:c4:bd:
                    56:56:3e:55:6d:c2:65:65:2d:6f:79:ff:2f:6f:c5:
                    2c:fe:00:97:bf:16:3f:d5:77:b8:d0:32:af:4c:a7:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E3:C2:C0:91:55:EA:BF:94:C4:B8:C9:33:D6:C1:E3:63:86:EA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d649e6-0b1f-3562-8ecb-bc5b227fc919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c0:bf:93:40:7d:4d:5c:f5:f9:60:7f:a5:c9:c8:6d:ff:82:
         b0:07:b6:9d:eb:81:ec:be:50:40:b4:0e:48:02:b1:b5:eb:79:
         1a:1e:d7:bc:a9:45:0b:75:91:30:e5:ee:5a:7a:88:5b:1f:c6:
         93:f1:11:0d:22:bd:02:e8:bc:f6:19:36:4a:08:b3:ba:62:f6:
         55:d9:b7:93:6c:56:fa:bd:b9:54:4d:b4:ac:20:1d:9e:ca:cd:
         41:88:2a:2a:62:78:d5:54:b5:87:28:9b:40:1c:63:ef:30:09:
         97:d9:f3:d3:fb:a0:59:dd:cb:b9:cb:e3:53:38:cb:76:e2:8c:
         ae:ff:d2:65:44:79:4f:8e:81:3e:ee:f1:90:c5:c8:c1:58:a7:
         cc:78:01:2f:e0:44:24:44:7e:f2:07:f7:82:60:41:56:98:62:
         c8:f7:70:35:9a:fe:20:09:9c:51:8d:20:75:db:44:cb:61:bc:
         57:61:fe:97:ec:12:ab:c0:b7:c7:4c:36:4d:4b:8a:6b:ff:10:
         d1:28:67:4d:c5:e3:93:0d:3f:9c:b7:2e:ba:fb:15:1a:0f:3d:
         52:ec:a5:04:20:f7:5b:41:21:f6:1b:6d:87:46:7f:46:ff:46:
         08:30:c5:d6:17:76:29:68:b6:cb:79:47:0b:59:de:c3:c0:6f:
         9f:43:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:23:08 2024 by rpki-client on console-fra.rpki-client.org