Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e8956c-e048-3cc7-a739-c9fdf3b243cf.roa
File:                     a4e8956c-e048-3cc7-a739-c9fdf3b243cf.roa (raw, json)
Hash identifier:          zTzkFjjBHMFzIAl1orLNcuXpBjeyH3ULiy0eQNejqnc=
Subject key identifier:   B6:60:C8:45:2E:F3:69:2D:BC:E1:F1:68:FC:F8:14:73:45:03:2B:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E36A3F26BB81EB94DEC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e8956c-e048-3cc7-a739-c9fdf3b243cf.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        73.188.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:36:a3:f2:6b:b8:1e:b9:4d:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=62f96193-867e-4625-b483-f5eb22723fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:28:63:77:04:cc:0e:65:3b:91:59:22:c7:
                    7c:09:32:91:c3:39:10:b7:dd:a2:c3:7c:75:d8:e2:
                    94:a7:3f:93:cd:2d:26:a5:a9:fe:66:8f:ac:d2:c2:
                    8e:1a:76:ab:70:14:6e:5f:6d:5a:04:b9:43:9b:41:
                    b6:98:0e:72:06:26:88:d7:3e:a5:88:7a:95:13:99:
                    af:79:6e:d6:ec:2c:32:f2:82:c9:e5:2a:d4:27:a5:
                    98:41:e7:a8:b8:b4:36:49:15:94:80:a4:52:7e:37:
                    e5:e7:2e:32:80:24:42:7b:0c:ae:50:fe:ce:7f:28:
                    47:c8:4b:de:ad:6d:40:11:2e:ac:09:9a:e3:77:48:
                    ab:a3:52:b9:a8:57:fa:7a:10:b7:af:1d:a9:dd:c6:
                    47:3a:8d:d1:b6:e0:b4:f1:5d:d7:c3:d3:a1:9b:8b:
                    89:f1:e3:d3:43:bc:22:f4:7b:47:76:95:ab:45:b3:
                    aa:fc:96:ab:3e:c1:63:b3:0c:d1:e3:dd:1e:5a:38:
                    a1:fc:65:24:07:c5:f1:a6:7a:3e:3b:1c:fb:48:f2:
                    96:7d:ea:d8:d4:f0:23:c2:9b:a1:8a:25:b0:ca:ec:
                    67:d7:14:16:73:12:4e:fc:10:c4:41:67:30:e4:ce:
                    18:6b:68:67:66:06:e5:b6:fd:07:17:46:e0:cd:97:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:C8:45:2E:F3:69:2D:BC:E1:F1:68:FC:F8:14:73:45:03:2B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e8956c-e048-3cc7-a739-c9fdf3b243cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:e1:0e:13:4a:b7:d7:d8:5e:35:c9:43:5d:8c:42:73:41:
         33:42:a4:dc:43:2d:c4:4a:c1:be:e0:5b:98:68:72:d6:8b:89:
         68:d8:55:ed:74:18:54:0b:71:3a:c5:31:0f:e4:9f:1a:83:89:
         53:e9:dd:e0:39:7d:b6:79:9b:ce:b4:f2:05:d2:ec:89:29:e7:
         76:b7:72:bb:a8:2d:bc:06:36:8a:a7:a2:2d:11:4a:4e:e9:29:
         d6:a1:5d:32:5d:d4:b0:4f:72:38:a3:d0:6a:4d:f2:0c:0b:d7:
         42:33:51:33:48:da:9d:1b:04:f4:8a:ff:22:56:b6:fb:16:94:
         7b:d4:55:28:e3:ea:82:1b:56:86:10:dc:2b:23:08:40:c2:c1:
         17:7b:37:dd:28:76:d2:39:a3:32:e0:56:c0:05:1f:6e:14:4f:
         52:ee:6c:10:9d:41:48:dd:e1:19:80:e5:7c:bd:72:ec:45:23:
         68:49:0a:5a:2b:bf:c7:76:6c:b0:f0:b6:65:05:ff:2f:f0:0f:
         3d:0e:3d:88:6a:bd:49:a6:a8:d8:25:a4:86:42:66:64:13:78:
         52:f5:f9:73:5a:24:c5:ed:8a:65:96:22:3d:fb:98:d9:ac:5b:
         77:b6:0d:16:e0:61:86:a6:07:1c:2f:18:be:1a:0b:b8:74:f5:
         69:bd:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:33 2024 by rpki-client on console-ams.rpki-client.org