Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa
File:                     9dcf0fe7-dd06-357d-88bb-898aff90368a.roa (raw, json)
Hash identifier:          RHQ1Ldc81MtO1uTd1u74lYRrsj42MFFpOflU1Jce5fY=
Subject key identifier:   4C:09:A8:15:37:E6:11:A9:A6:37:AA:17:18:C1:13:34:11:40:88:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858481170127BF28573A3D2C08FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.127.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:12:7b:f2:85:73:a3:d2:c0:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=db8205d7-12e8-488f-a525-f973923afbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:d1:02:d6:c8:93:8c:c9:63:17:17:01:ce:
                    30:80:d6:df:be:6f:a4:f5:40:03:20:a3:4d:b6:60:
                    72:3d:db:88:b9:cf:62:e6:89:56:39:08:bf:e0:4c:
                    60:03:aa:68:0f:81:7e:7d:b9:2c:5c:52:4c:b8:a2:
                    7a:13:59:08:65:4b:6d:3b:cd:0b:da:ea:98:f1:03:
                    32:b2:cd:1f:08:dd:0d:df:da:c6:ba:fd:44:c3:7b:
                    f4:d7:88:7c:e2:49:3a:a9:2c:3a:5d:85:a7:54:f1:
                    ca:6a:4f:4f:82:70:85:c0:db:f4:46:38:07:ec:c2:
                    28:e3:48:13:c1:3b:3e:8e:70:86:d7:05:7f:8b:77:
                    90:9a:df:5f:5e:51:d5:22:18:80:14:23:80:23:94:
                    81:c2:91:a0:1a:d1:c1:be:cd:cc:70:85:be:fe:c6:
                    59:ab:3c:46:48:98:70:6a:83:b8:d1:29:6a:66:51:
                    75:ad:a8:47:4b:f2:c3:1e:44:9b:fe:7f:8d:c2:9e:
                    55:a5:f3:82:27:40:b5:bb:dd:a3:08:3b:4b:34:68:
                    d9:76:8d:78:f7:50:bb:61:7e:be:3d:19:b9:02:bf:
                    e7:f1:01:23:43:4f:b4:18:1c:56:4a:4c:d0:15:38:
                    98:9e:ff:20:31:8c:c3:f4:24:ec:d4:de:08:e1:47:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:A8:15:37:E6:11:A9:A6:37:AA:17:18:C1:13:34:11:40:88:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcf0fe7-dd06-357d-88bb-898aff90368a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.127.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:db:29:0d:1b:a2:a8:4a:0b:cb:ba:56:0b:32:f1:a0:bc:
         23:d1:1e:d3:62:46:64:e2:d7:70:53:44:3d:12:4d:1a:fd:f7:
         03:fc:8f:a3:1a:7d:03:d2:4f:dc:2f:c0:53:b9:82:4a:71:04:
         fe:1a:13:28:2a:2a:69:8f:28:5e:d9:4e:00:58:b3:a4:11:86:
         48:04:b7:79:d9:08:a9:35:ce:8d:27:f1:08:81:53:82:8c:1c:
         d2:5d:94:2a:b2:d1:e4:7d:ac:30:ac:f3:5c:0f:84:17:f3:2c:
         db:a9:d0:0d:7e:d8:fe:d6:13:1b:2c:85:75:06:8d:d4:e8:80:
         0e:f1:c9:f3:95:ab:33:dd:0e:71:df:e1:bd:84:8f:5b:2b:1d:
         2c:b9:c9:7e:cf:ab:8a:95:4e:79:af:a2:c0:ef:35:dc:00:a4:
         85:b7:aa:a0:02:2a:35:52:a6:d9:2b:19:d0:7e:ee:1f:ae:16:
         46:e3:98:80:05:e3:1b:23:44:23:bc:9a:de:69:9d:d2:0a:1e:
         37:b0:9c:64:cb:69:5e:46:bd:09:61:6f:81:0a:79:47:d4:a8:
         28:b2:ad:69:a1:f9:a1:2c:61:02:71:41:cb:e6:ff:49:1a:72:
         c9:30:af:fc:f0:af:0f:49:62:d9:66:a9:3f:2b:fe:0b:18:d7:
         d7:77:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org