Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99387ec7-cc2b-3273-83d2-6a19d08f5daa.roa
File:                     99387ec7-cc2b-3273-83d2-6a19d08f5daa.roa (raw, json)
Hash identifier:          F+vrDbLdVFcd1aS+uEmyiqbNHmg1ZdJ5i04eA8zWIlw=
Subject key identifier:   A8:E3:81:AE:2E:75:89:12:06:65:22:06:A2:9A:A6:43:1B:72:C8:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5EF3A980A722149619670
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99387ec7-cc2b-3273-83d2-6a19d08f5daa.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:ef:3a:98:0a:72:21:49:61:96:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=47defab9-1a50-4490-98f3-5dc188334f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:15:ef:7e:68:a6:95:52:e2:57:4a:2f:a5:
                    cd:1a:cd:6d:2e:29:af:6e:1c:90:a9:93:cb:35:94:
                    a3:0e:5b:08:ec:e7:73:3f:1b:52:55:09:4c:38:2b:
                    c9:24:94:63:26:d5:b3:ca:99:70:09:a7:ea:0d:46:
                    a7:a3:6c:9c:8f:47:60:fe:ab:8f:37:c0:dd:bf:15:
                    bd:4c:3a:1c:77:94:fe:05:2e:72:a0:5f:bb:d2:23:
                    06:c6:7f:34:68:81:1b:5b:2d:c9:b7:d4:3e:0c:63:
                    09:86:17:6a:82:eb:0f:ce:96:e7:51:94:62:ef:ea:
                    ac:5d:a1:27:15:84:0c:1f:1f:0b:23:30:17:21:0c:
                    ab:76:13:e5:97:c4:eb:d8:0b:da:dc:6a:14:77:87:
                    13:4e:5e:dc:62:0d:92:49:d7:60:83:96:8e:72:7a:
                    bf:84:bd:99:b2:81:45:dd:3a:db:e7:cb:91:92:3e:
                    00:2b:16:73:b2:e5:a9:72:1e:25:a6:b8:12:dc:f1:
                    21:59:a6:17:05:c4:5a:69:3d:d2:14:2b:21:d3:17:
                    82:45:0b:9a:b1:b3:7a:60:4d:69:af:e6:2f:5c:99:
                    3a:24:48:29:a3:b3:03:f7:53:b9:90:f3:43:f8:76:
                    4d:c1:89:07:e3:07:c8:94:3f:cb:9b:4b:20:c5:74:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:81:AE:2E:75:89:12:06:65:22:06:A2:9A:A6:43:1B:72:C8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99387ec7-cc2b-3273-83d2-6a19d08f5daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:08:c3:93:40:4f:21:a6:6e:51:cb:ba:77:1f:81:69:7a:71:
         3c:b4:0e:0d:f5:3a:e8:80:24:bc:72:8d:82:b0:9a:a9:ea:37:
         91:cc:98:3b:24:15:ba:41:bf:f5:f3:51:98:3f:dd:7f:e4:7b:
         42:12:9a:4f:d0:9e:35:72:48:10:96:d1:6d:fd:c1:be:4b:9a:
         6b:8d:ae:9d:a4:26:a1:22:72:82:1b:31:51:da:88:ce:1a:f8:
         39:23:ac:6c:5b:80:65:03:66:15:37:8d:19:9e:63:ff:df:67:
         fc:1e:d9:f5:10:e7:11:dc:2c:77:3b:57:90:04:2e:92:6e:f4:
         20:a2:7a:99:12:83:e0:3f:65:35:b6:bc:3a:ee:b3:3d:8b:02:
         c2:2c:da:ad:63:c1:0b:a5:f3:75:7c:6c:94:90:7e:7f:ba:6d:
         03:dc:07:37:7c:fc:84:77:74:77:8e:df:68:68:79:a4:eb:5d:
         14:19:7b:30:e6:65:2b:33:e4:c0:35:3e:ad:a4:60:1f:85:ec:
         a2:a9:80:de:26:cf:72:73:f8:63:28:de:63:ed:86:a1:1c:4c:
         8f:67:1e:22:a7:51:62:24:b8:b2:36:dc:1c:17:3c:7b:b3:75:
         44:a6:05:ce:fb:1a:80:a1:8d:be:60:e1:7c:f5:cc:4c:3a:f7:
         6a:90:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:23:13 2024 by rpki-client on console-fra.rpki-client.org