Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab90d8a4-2c75-3270-bb4d-0e722738b44f.roa
File:                     ab90d8a4-2c75-3270-bb4d-0e722738b44f.roa (raw, json)
Hash identifier:          O2+cuT2UdN8RBXXEZLh9rchoDxkomE7minqCQ8nYCg0=
Subject key identifier:   8E:8F:59:F0:3D:8F:A5:53:38:31:19:17:52:8A:9B:A5:FE:D7:CD:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8926FF917C91718F219940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab90d8a4-2c75-3270-bb4d-0e722738b44f.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.215.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:26:ff:91:7c:91:71:8f:21:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=534541de-8ef5-425d-9d39-8b45cc778a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:c5:d5:8c:14:a1:a9:66:71:94:cc:8f:50:
                    d1:0a:d2:2c:77:a6:78:2f:bb:fd:ed:72:d3:56:14:
                    22:ef:e4:15:ed:ef:72:cc:6f:cb:05:e1:de:89:49:
                    22:11:96:f7:6c:35:2e:06:9b:db:66:09:36:1a:a7:
                    a0:5a:15:25:1d:0f:da:37:28:53:6e:2d:f1:f0:1c:
                    0c:86:5d:d3:bf:70:d1:6b:1b:70:c2:6e:8c:47:7e:
                    05:c8:8b:0d:20:a8:e1:7f:c1:18:66:31:6d:64:c2:
                    74:08:43:7f:55:d7:5c:d4:d8:ea:42:81:60:eb:57:
                    5d:f6:cf:79:ef:2d:6f:c6:5a:d2:47:e3:78:9a:10:
                    3a:b7:76:54:3f:dd:ae:a0:86:32:cb:6c:82:ef:24:
                    36:3d:01:e8:cf:8e:97:ad:bb:8d:48:2b:7e:d6:37:
                    9f:a4:eb:3d:db:c2:18:ef:42:12:7e:fb:11:92:e9:
                    b2:2c:40:dc:c8:d4:35:a7:38:8c:d5:e8:54:4a:db:
                    47:7c:5d:68:38:69:ac:b1:6f:6e:62:d0:af:30:83:
                    f4:32:20:19:0e:a2:54:51:2e:c0:1f:67:5b:3d:b8:
                    af:d9:61:76:e5:e5:28:3b:40:b8:ff:c7:6f:17:07:
                    ee:83:9e:69:fd:4d:7b:06:c7:84:4d:00:3a:47:51:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:59:F0:3D:8F:A5:53:38:31:19:17:52:8A:9B:A5:FE:D7:CD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab90d8a4-2c75-3270-bb4d-0e722738b44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.215.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:98:14:7b:63:eb:ad:81:00:d9:27:3e:a8:86:9f:6a:fe:3a:
         28:15:93:87:4c:60:a7:0e:b6:5a:1b:0a:0a:8a:c9:13:a8:c5:
         10:4a:e1:7a:6c:c0:7a:2e:0a:d2:fd:d0:d2:c6:77:f8:22:bb:
         e4:34:9b:aa:12:69:1b:0b:37:03:56:1c:78:2d:9e:4b:c2:f3:
         ca:c9:b3:75:d3:37:ec:91:4b:d3:89:fd:cb:d8:58:40:6a:26:
         e3:fa:40:2f:40:94:79:72:a7:f0:39:6a:00:00:1e:6c:57:ab:
         93:cd:66:68:47:6a:65:bf:4f:72:8b:18:07:f4:88:c5:8c:7c:
         d7:70:9d:3a:97:ae:6e:3a:4b:84:0d:8e:1d:c9:ea:88:00:e7:
         15:37:e7:f4:7e:b8:bc:74:5b:84:b7:2e:89:d0:ee:c6:d2:9a:
         94:5e:9f:fd:56:e8:95:84:b9:f6:1b:4d:cb:f5:58:98:08:f2:
         08:a5:7b:c0:ec:52:87:cd:16:20:cb:80:d5:2e:a9:e5:d8:e6:
         e4:c6:35:99:52:6f:aa:94:c2:58:b6:86:57:a0:8a:7e:3d:dc:
         2f:e0:a1:43:07:b8:52:86:9a:ce:bb:42:f1:67:0b:f9:a7:81:
         4b:35:43:18:87:12:29:1c:a4:24:9a:40:0f:78:b4:64:10:7f:
         36:12:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:18 2024 by rpki-client on console-fra.rpki-client.org