Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3798d2b-e3a8-3580-b2a7-2afeba203466.roa
File:                     a3798d2b-e3a8-3580-b2a7-2afeba203466.roa (raw, json)
Hash identifier:          Hi71ClqwpkpcF++4mE2q3k6OTRJV3n8RXfQbkeQFbkU=
Subject key identifier:   BE:78:E8:9F:B0:C5:50:9F:18:B7:27:7E:C5:8C:4F:31:D2:A1:C1:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E59CCE7088390EE418AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3798d2b-e3a8-3580-b2a7-2afeba203466.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.82.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:9c:ce:70:88:39:0e:e4:18:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=d1ed5f85-2d67-4b7c-9208-34aca5ab0ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:15:49:6a:20:97:4b:8c:47:1d:0b:67:6e:
                    92:85:9e:a6:29:fa:8f:81:c4:de:5c:aa:4c:0e:c0:
                    77:86:13:7c:01:fd:b2:ef:26:d7:68:b6:a1:fc:c2:
                    cd:f7:d2:0e:04:6a:b1:57:8e:0d:a3:77:15:00:f7:
                    00:4b:a4:ca:36:c7:66:c9:fc:1b:45:37:b5:af:16:
                    6c:03:2c:24:f5:2d:e3:7f:32:82:cf:25:00:f3:63:
                    57:93:4b:7a:fd:45:2c:33:22:64:f4:6f:2d:21:ae:
                    7e:a9:a2:a2:ee:53:6a:0b:51:fe:e2:06:69:b5:34:
                    53:e0:b3:29:bc:b9:7e:c5:f4:bd:27:d9:42:06:e5:
                    d0:c3:31:31:4a:53:ea:1b:33:ac:ec:94:23:c9:e0:
                    11:fc:fa:76:41:9e:2b:51:33:dc:32:eb:02:31:5d:
                    3b:61:94:1c:48:cc:a5:b8:9b:20:35:19:6e:b7:c0:
                    38:6b:58:b5:d7:61:42:56:9c:ed:fc:13:c5:f6:4c:
                    36:92:1f:4e:04:1c:a9:72:04:4c:10:51:da:e3:9e:
                    9f:d3:43:53:01:65:1c:10:81:14:4a:c1:42:a4:bf:
                    2b:21:02:62:da:d1:48:64:af:98:ba:8b:46:59:57:
                    2a:26:e0:22:8d:46:2e:ad:85:8a:99:61:e3:3c:c2:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:E8:9F:B0:C5:50:9F:18:B7:27:7E:C5:8C:4F:31:D2:A1:C1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3798d2b-e3a8-3580-b2a7-2afeba203466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.82.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:84:12:51:84:fc:5d:7e:a9:8b:9b:ce:ba:04:e2:d1:a3:
         22:d9:8b:c7:05:be:4b:69:fe:b2:92:6a:bf:44:b4:69:a2:c6:
         7f:ee:e8:33:10:df:9a:40:0f:73:c7:29:a3:f8:41:27:a4:6d:
         55:dd:f4:ff:1a:d2:fe:b3:fe:1a:2b:21:22:be:e9:34:8b:51:
         b3:37:6b:95:96:c8:6f:7b:cc:c0:78:ff:fa:ef:da:ae:0f:d0:
         65:24:20:ec:2d:3c:a5:17:1c:e4:36:82:e9:a7:6b:53:e0:2a:
         d1:67:85:17:1c:bf:1e:31:db:63:33:f7:54:f0:34:ab:63:bb:
         72:59:32:dd:e7:21:65:91:e1:69:42:4b:bc:ee:6c:c2:46:53:
         a1:17:16:56:ef:4b:72:5f:0b:1a:66:fd:57:bf:d5:ce:31:d8:
         92:88:77:99:d0:f3:ac:a2:8e:3d:70:bf:95:6c:07:13:0a:b2:
         ac:bc:36:c5:27:0d:30:2c:1d:38:56:1f:40:63:b1:3d:de:3f:
         71:3e:4f:cf:36:89:fe:8c:99:bf:05:43:d5:b5:4c:54:e8:93:
         84:22:3d:60:d4:dc:9d:fd:99:a8:10:df:5c:4f:18:aa:b0:e5:
         7e:07:54:7a:c9:10:61:f3:a2:9c:e5:dc:82:47:8e:c6:44:58:
         8d:84:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:25:06 2024 by rpki-client on console-fra.rpki-client.org