Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a1e8a4-87d5-39e0-9405-d255f8a90b3e.roa
File:                     a3a1e8a4-87d5-39e0-9405-d255f8a90b3e.roa (raw, json)
Hash identifier:          21SYTF6+htN6wAacfaKZcS0SgCJzcixHGVyibGKKJdg=
Subject key identifier:   7B:33:CD:D8:61:A1:9A:BC:99:DB:ED:91:BD:0B:0F:EE:AA:FE:36:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E58561AC1FA887433EFC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a1e8a4-87d5-39e0-9405-d255f8a90b3e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.137.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:85:61:ac:1f:a8:87:43:3e:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=58649050-e4dc-4b09-bb20-5a7d653cbaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:5f:c1:3c:14:c6:59:73:2c:c9:aa:41:cd:
                    8c:a9:6d:27:79:10:6c:33:db:e5:23:45:59:18:9a:
                    97:90:bf:bc:62:49:38:84:3e:8d:23:72:4b:1c:42:
                    3d:d4:d1:85:40:b2:1c:b5:2b:16:07:5d:c0:09:f4:
                    97:29:0c:14:8e:27:a0:26:e4:40:3f:71:d8:e9:31:
                    c5:26:10:e5:65:98:24:3c:e0:3c:9d:80:44:dd:d5:
                    28:e0:98:53:a9:ac:c7:66:f7:4e:a3:2f:b7:ed:e5:
                    a0:d8:5a:46:ca:8d:3a:e7:fe:4d:8c:67:f2:f8:39:
                    e1:b6:07:12:93:50:e1:2b:10:a1:dc:55:cb:44:1f:
                    5a:15:04:16:8c:c1:4a:d8:f9:ab:9b:f1:81:78:2f:
                    ec:66:85:92:0f:43:a7:c0:86:90:71:87:94:f3:9a:
                    0a:c3:75:15:ce:cc:fe:99:d0:86:ac:7e:f4:bb:d0:
                    ed:e5:91:2d:0a:bf:1a:b3:53:93:3d:e8:35:35:8d:
                    a5:a9:ac:17:98:ce:4a:d8:6e:0d:c5:9f:18:d9:fe:
                    b0:0f:0d:55:47:2f:55:b2:b7:ff:fb:9b:74:ef:9a:
                    51:b2:02:f0:bb:da:1c:9f:95:a4:0d:c2:56:b9:61:
                    3f:be:9e:63:60:83:cd:8f:21:19:b1:75:fb:ee:9b:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:CD:D8:61:A1:9A:BC:99:DB:ED:91:BD:0B:0F:EE:AA:FE:36:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a1e8a4-87d5-39e0-9405-d255f8a90b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:46:43:f3:e2:50:35:d8:cf:74:40:14:e2:9c:af:dd:e9:0b:
         63:2f:d1:17:86:4e:e4:ec:ea:17:de:c0:1f:00:84:b2:16:61:
         2a:a0:78:73:09:c2:cc:a9:c7:52:c2:bd:75:74:34:81:a1:6a:
         82:24:e3:4b:86:0b:a3:85:45:a8:88:b2:bd:df:6b:3a:87:3d:
         5b:6c:8f:d3:7d:3f:4b:ac:0a:3f:51:2f:fc:c9:0a:b4:12:55:
         dd:2d:27:ed:83:fe:d4:0c:b3:7b:0c:ac:22:94:09:ba:3d:d5:
         1a:ce:69:73:38:6f:1e:25:e2:29:11:d1:9e:60:c9:20:8f:d4:
         ed:10:af:6c:16:fd:16:ed:f6:3e:62:20:28:fd:22:98:fa:ef:
         75:76:9e:1d:dc:fd:3d:1e:e8:00:b9:f7:67:7f:0b:76:39:0c:
         db:a8:78:8d:e0:2f:05:c0:1e:bb:60:2e:ef:30:83:1e:61:b2:
         1c:f9:f1:be:8c:44:56:ba:84:36:de:2d:f1:b1:75:9e:25:9c:
         c0:8c:33:7b:1a:c5:31:59:e7:1a:cc:77:b4:62:ba:03:02:f8:
         04:ad:a6:99:5c:7e:c9:ff:51:e8:bc:09:e0:e5:e5:a2:26:14:
         24:90:e9:93:65:97:e6:61:6f:28:5c:c1:b4:e1:e9:6b:f5:30:
         f6:e4:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:12:07 2024 by rpki-client on console-ams.rpki-client.org