Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9cd129-cb56-3768-b6df-5ba915e42d28.roa
File:                     9a9cd129-cb56-3768-b6df-5ba915e42d28.roa (raw, json)
Hash identifier:          lRZS14bgnQ1f767f4BcYoekT6zO8jNtppZNUNQ+aK80=
Subject key identifier:   38:89:A3:DF:48:5C:4C:00:BF:52:47:36:25:C5:5A:9A:41:C8:D4:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF9B3A150F286795A14E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9cd129-cb56-3768-b6df-5ba915e42d28.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        73.94.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:9b:3a:15:0f:28:67:95:a1:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=32dd7cb4-07b5-4014-8266-9c947c8380be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:bd:f8:f8:86:c5:65:17:ff:5b:28:46:a3:
                    8a:5c:74:74:b1:49:94:16:08:da:01:84:ab:b6:65:
                    de:5e:4c:5e:c7:10:8e:5d:5b:37:56:a8:ee:05:71:
                    5e:30:04:ad:1f:93:c2:41:f4:7c:28:85:dc:67:ab:
                    c4:5a:9d:d1:ab:8b:ea:9c:39:d1:aa:49:c3:37:b9:
                    01:de:ec:4c:4a:2d:c4:57:7d:49:39:16:a2:4c:0f:
                    c7:f9:46:48:6a:ec:f5:16:a0:65:87:8c:e3:76:db:
                    63:0e:46:56:ba:7b:f5:b5:98:f8:26:cb:11:27:fe:
                    bd:28:39:18:b5:7a:d4:ff:19:2a:17:97:93:35:a3:
                    9b:c6:4c:de:96:98:ff:da:1d:d1:8a:f0:44:b6:05:
                    a8:5a:c4:3d:8c:d8:68:22:dd:a8:1e:14:aa:db:ab:
                    3d:d2:eb:6f:46:4f:e2:23:08:f7:15:e6:39:bc:25:
                    29:9d:0c:67:e6:2e:00:6c:04:bb:8c:08:cd:9c:4d:
                    f1:f2:84:d3:bd:c2:85:d9:ae:9c:d5:a5:00:f2:2f:
                    d0:55:12:bd:bc:82:c7:54:1a:c0:9f:43:14:f2:a1:
                    25:cc:60:fb:70:ae:bb:0c:b2:18:d5:67:5f:b5:99:
                    53:7f:80:0b:b7:d5:73:1b:59:0b:cb:83:4d:48:63:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:89:A3:DF:48:5C:4C:00:BF:52:47:36:25:C5:5A:9A:41:C8:D4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9cd129-cb56-3768-b6df-5ba915e42d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:dc:35:aa:fa:14:07:1c:9c:f2:e8:d9:05:dd:16:02:96:
         29:66:f0:4c:3f:61:0d:d2:d9:ff:a7:ae:0a:6f:5e:c1:cd:ba:
         87:2b:92:92:26:00:07:29:04:f4:4e:a3:b0:8b:6b:43:53:17:
         5d:a5:09:aa:f4:86:ec:c1:79:12:94:d0:5f:e9:ce:19:1c:4e:
         70:f7:b5:8d:74:5b:f4:3f:98:28:35:8a:e8:ef:e6:ca:f7:4f:
         5a:fc:b2:7a:d1:d5:4a:68:ae:2f:7f:43:21:2b:ee:ce:ff:08:
         d9:fe:77:78:22:67:ef:53:69:94:0e:f6:eb:a0:64:22:07:37:
         e3:e3:3f:49:17:44:cf:ef:dd:d2:ed:ec:ad:64:fb:3c:5f:c7:
         e8:84:f4:c6:73:67:0d:42:2d:14:6f:4b:f2:9b:b3:2d:46:3b:
         bb:b8:27:7e:a7:af:84:72:1b:b8:16:83:bd:95:d8:a8:10:de:
         40:c4:68:d8:1c:34:6b:78:74:f2:b1:88:30:c3:11:ff:ce:d8:
         1b:1d:b4:5e:f1:b6:62:ae:db:9c:7a:ab:67:32:c4:4e:12:80:
         c2:d0:ce:89:58:e3:5f:7b:c9:be:0d:71:43:73:6e:34:e8:dc:
         12:46:df:26:fb:3c:89:e6:02:73:64:72:33:7c:93:2f:e9:91:
         01:f9:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:14 2024 by rpki-client on console-fra.rpki-client.org