Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b382c275-38a0-32ab-bc51-5587d78ff998.roa
File:                     b382c275-38a0-32ab-bc51-5587d78ff998.roa (raw, json)
Hash identifier:          R8cj8SwEPDnryhf9ltY8JY3swyFde65/58GuoeCi+XQ=
Subject key identifier:   0C:99:7C:C8:52:88:1D:C9:8C:45:44:44:F1:00:43:80:9D:2E:3C:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7039BEB4CDD34B7E85160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b382c275-38a0-32ab-bc51-5587d78ff998.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.38.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:03:9b:eb:4c:dd:34:b7:e8:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=09b88967-6a2a-44e5-8fb0-869277e57b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:81:52:82:05:cd:3b:05:e3:78:75:a0:c1:
                    8d:09:2d:ce:3b:3e:eb:0d:02:a9:41:d1:da:1e:d8:
                    0b:5f:76:c7:06:27:d6:ee:91:65:f1:83:c6:11:48:
                    ac:e3:e4:5d:5a:7b:f5:31:72:b9:b8:e3:30:f0:c3:
                    32:e6:4f:cf:16:0e:63:9a:00:66:de:4f:8f:3c:96:
                    96:2d:30:b6:78:0a:8b:b4:04:0d:ec:3a:00:58:d7:
                    b6:d1:10:7d:26:2c:dc:1b:0f:71:0c:12:ec:3c:99:
                    8d:ae:8c:2b:0d:88:8b:71:23:e5:02:6c:6b:89:29:
                    fc:69:8f:2e:5d:08:b7:83:ca:0c:a3:a1:22:dd:9b:
                    fd:c9:52:52:64:48:bf:65:10:5a:3a:d3:31:fe:99:
                    03:6c:ca:c9:37:e4:62:3b:6a:7d:ba:d7:a7:f7:38:
                    13:e8:11:5e:bf:30:3b:b3:b9:52:d7:da:3c:76:20:
                    60:d4:1c:72:6d:5d:32:02:b5:61:55:86:04:92:4f:
                    6a:b9:1b:58:b6:a0:98:ef:e4:bc:5a:12:57:6f:7f:
                    60:0e:73:31:6a:d9:33:25:9d:e6:9b:42:1b:14:6b:
                    2a:5a:ff:a5:d1:52:bc:b3:49:89:5a:a5:ec:dc:8e:
                    45:00:46:4d:be:be:16:88:e7:01:84:3e:83:3a:d4:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:99:7C:C8:52:88:1D:C9:8C:45:44:44:F1:00:43:80:9D:2E:3C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b382c275-38a0-32ab-bc51-5587d78ff998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:6f:fe:22:e8:d8:ac:dd:a3:b0:c9:cd:7e:c2:97:24:85:
         a3:71:65:e5:c1:69:25:a2:e3:ca:dd:5e:cc:f2:de:8e:a0:4b:
         20:50:65:26:27:ae:de:f8:66:cb:cf:da:a0:03:a1:22:43:54:
         a0:90:e0:c9:7d:a7:f5:86:22:1a:3b:b5:d3:c5:ee:78:e4:f5:
         ea:58:7c:ca:7b:ca:ab:37:8b:9b:fc:d3:16:36:4e:8d:ad:8c:
         b4:a6:25:81:42:c7:54:75:d2:93:8f:aa:20:78:7d:cf:6d:f0:
         9c:60:1f:f4:f0:03:39:fd:65:ca:15:84:ab:41:77:9d:5b:56:
         09:8e:9f:00:c8:6c:48:d5:8e:a4:72:1d:fe:71:f6:7d:34:5c:
         5c:52:82:be:90:d3:84:59:ec:c9:ee:a8:c6:e6:d8:97:e6:19:
         60:96:d2:64:0e:f5:78:1f:10:ca:47:a0:3f:37:c6:92:d3:0c:
         17:9b:87:28:b1:f0:6a:59:99:a0:3f:56:35:59:0e:82:f6:60:
         56:07:48:4b:0a:ab:42:b1:9b:4c:21:fe:04:ea:9c:ab:7c:5a:
         0c:66:f9:a2:c7:4d:c3:33:2e:7e:3f:42:ec:d2:05:8a:b4:20:
         3a:7f:25:55:3f:cd:7c:77:90:4e:e1:a0:d6:9a:37:ca:23:dd:
         51:e4:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:03:59 2024 by rpki-client on console-ams.rpki-client.org