Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5500c-31f0-38b2-9ee0-836fadb7871b.roa
File:                     9ba5500c-31f0-38b2-9ee0-836fadb7871b.roa (raw, json)
Hash identifier:          GEvThRNSgVW7IIPDDkeTuR7FBGzJGC4PJxRxHaXgqsM=
Subject key identifier:   77:2C:B8:D3:81:0B:3C:44:A7:DE:35:97:20:55:0D:C9:A4:DE:A8:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E590DBE7CAD32B01B4D900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5500c-31f0-38b2-9ee0-836fadb7871b.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:90:db:e7:ca:d3:2b:01:b4:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=367e1681-21c6-4c4a-8407-86ae8b59db8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:2c:be:a9:8d:da:4b:60:a0:55:c7:6e:a5:
                    ed:13:d2:9d:2d:f9:6b:43:79:aa:c5:c5:21:19:6f:
                    a4:9e:57:fa:83:b0:a2:0c:f9:7e:db:26:21:c2:51:
                    b8:c9:87:cd:70:55:c2:ec:88:8f:cb:ab:c4:2c:cd:
                    f1:89:27:a9:d6:d3:d7:ac:c2:90:18:46:39:f4:44:
                    7b:b2:26:40:b4:f4:9a:e5:6b:21:e7:82:86:f5:dc:
                    97:14:c8:b7:47:94:05:92:03:4b:5c:4d:5b:f0:81:
                    5e:53:a9:da:97:27:33:7a:97:85:1b:7f:85:cc:5d:
                    41:ef:68:cd:44:fe:cb:1c:e5:07:77:b3:db:f0:76:
                    2b:1d:73:0d:07:a0:1d:92:b6:9d:a1:6f:d8:47:bc:
                    5b:9a:0d:37:80:7e:05:0d:22:41:93:e2:be:bb:9c:
                    7a:11:3b:3a:4e:35:88:4c:cb:d5:30:0c:d6:09:82:
                    ed:93:9c:b1:ef:26:b7:53:72:c8:57:c6:a2:e2:33:
                    e8:0c:82:c9:1a:58:6b:eb:6f:83:3a:88:0c:ad:04:
                    6e:96:86:aa:9c:20:d2:65:70:d5:83:24:c1:30:96:
                    fa:80:b9:f9:2a:c2:a3:0f:f4:5f:3f:cf:d3:ca:1a:
                    74:c3:52:6c:60:1a:3f:08:7a:9e:a1:2c:e5:62:ef:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:B8:D3:81:0B:3C:44:A7:DE:35:97:20:55:0D:C9:A4:DE:A8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5500c-31f0-38b2-9ee0-836fadb7871b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:c7:8e:c4:62:35:c1:11:bd:d6:4a:2a:64:2f:a1:27:db:
         00:e5:5f:19:b1:a7:11:b5:15:ad:bd:44:b6:29:0e:83:83:31:
         14:db:93:25:23:b1:28:e9:49:40:40:5f:5f:27:67:dc:ff:2a:
         28:f9:08:6a:eb:0a:a6:74:be:33:de:f3:0c:95:30:1e:8c:9a:
         53:93:d6:69:a7:f5:2a:d3:7b:ad:d4:6b:58:e0:e5:85:b1:09:
         20:c1:cc:1a:30:e0:66:81:ff:93:50:c7:a0:2a:42:0a:85:9b:
         49:97:98:bd:1c:99:c0:46:a8:92:44:da:a6:3d:13:c4:d1:f3:
         cf:b1:5a:3e:94:10:5c:5d:be:62:11:ca:aa:cf:72:17:9e:e1:
         02:e9:ab:76:aa:f4:01:5f:6b:60:9d:db:02:05:a0:4b:1a:29:
         44:aa:f3:4d:e8:eb:96:91:35:8c:37:fe:5c:ba:88:04:ec:c3:
         33:68:b5:d9:a4:e5:1f:21:fe:84:b9:7d:bf:d1:36:8d:0a:75:
         63:35:c0:71:30:a0:45:f9:05:d3:aa:16:7f:34:25:34:6a:67:
         23:72:a3:98:68:a3:64:96:c8:af:4e:9a:5e:29:8f:9a:91:a4:
         3a:24:ba:ab:22:2a:7a:8d:61:d9:4a:fe:dd:7e:f0:e7:c9:6d:
         35:0f:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:35:51 2024 by rpki-client on console-ams.rpki-client.org