Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa
File:                     ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa (raw, json)
Hash identifier:          pqF1IBPKXYIj7+3ygiIL5b3mL59TIoLhlWCi5FhC4OM=
Subject key identifier:   A3:E3:06:15:63:5F:98:61:9A:AB:09:85:3D:EB:4F:9C:A1:F2:61:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C81B3E895666FF84819760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        73.32.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:1b:3e:89:56:66:ff:84:81:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ea8c856d-f13d-416e-a478-748d67ed83a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:b8:4f:2b:8d:d9:89:d1:38:8a:26:cb:d6:
                    c2:ea:3f:70:ff:24:78:8e:2a:68:18:ce:59:2a:25:
                    18:66:0e:9b:4b:66:48:5a:f8:d2:94:dc:bc:bd:c1:
                    59:ec:3e:de:f9:da:4b:b0:f9:d1:ea:4f:dc:17:d8:
                    d5:7c:df:f1:00:80:03:d5:08:64:93:71:bd:98:02:
                    f9:d0:64:b8:76:bb:2d:35:56:0a:57:a1:8e:c4:55:
                    88:f8:91:61:63:0b:a1:bd:97:c9:58:7c:58:4c:36:
                    55:9f:9c:9c:2d:cf:a8:b0:83:a4:e1:c4:5c:a4:22:
                    0a:86:95:76:ae:5b:10:54:ea:d8:3c:6d:1d:b0:96:
                    10:b6:d1:74:89:6d:ef:de:d0:36:2f:e7:f9:d0:a7:
                    00:b1:40:06:c6:64:80:ef:2f:90:c9:ac:0e:67:5e:
                    72:ec:66:c0:a2:7c:ea:ad:26:e5:da:17:8c:fd:3e:
                    96:12:92:bd:5c:ce:9f:b2:71:ba:ae:0a:56:16:66:
                    4f:e6:3e:79:8c:69:7c:d6:2c:33:5d:ca:8e:7a:2c:
                    b4:d8:35:25:3c:b2:dc:b6:7e:14:38:1b:cd:d7:6d:
                    0b:5f:0d:43:c1:65:f9:f4:3d:74:5e:bd:5c:79:45:
                    c5:95:04:d2:b5:4f:aa:51:c7:d7:53:cf:b0:bf:d8:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:06:15:63:5F:98:61:9A:AB:09:85:3D:EB:4F:9C:A1:F2:61:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:84:62:a1:4f:e9:f1:0a:67:97:de:13:bb:76:d9:30:d5:
         19:d6:46:c7:be:71:57:4a:a7:15:25:14:91:d6:6f:e2:8d:4e:
         c2:f7:a7:b0:e3:e5:30:0f:88:f0:a0:ff:6d:96:f4:ce:53:16:
         06:1f:ed:4e:6a:49:a6:47:b4:1e:74:75:ca:07:f4:07:9c:c4:
         04:69:46:7e:7d:66:2a:c8:cf:8f:0a:b4:82:45:31:e3:be:a8:
         24:a1:2b:84:8b:af:40:4f:61:2e:4a:da:49:3d:3a:b1:53:37:
         28:54:2b:60:8f:d5:9a:07:28:54:0f:c9:9b:16:c4:39:78:d4:
         47:49:84:87:31:47:96:33:6c:18:cc:a1:fe:c6:a3:d7:be:01:
         a0:f1:6f:18:eb:3b:5c:94:3b:5a:25:7f:87:e7:58:b5:02:d4:
         3d:44:3f:78:76:f8:12:50:a9:57:52:ca:ab:89:e7:ba:12:55:
         12:d1:38:7f:b0:c0:b4:b6:e7:25:6e:c9:29:ca:22:e4:e7:99:
         71:9f:30:00:62:6c:12:64:71:ae:cd:8a:eb:f9:7f:c8:0e:79:
         cd:16:c8:b5:d7:4c:d6:c9:b8:44:d5:67:fd:a5:48:d6:9c:39:
         b9:48:2d:2b:a6:34:ac:3e:fb:b2:80:71:91:a5:08:b7:0f:63:
         35:7f:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:43:03 2024 by rpki-client on console-fra.rpki-client.org