Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50dc840-056e-3ed5-a4f5-597074912946.roa
File:                     b50dc840-056e-3ed5-a4f5-597074912946.roa (raw, json)
Hash identifier:          zysH6JQuKTcYb9wrzpgPgwm4QYZiAetaLUBq5Wwba3A=
Subject key identifier:   65:43:24:EC:0E:E9:3D:B7:5B:14:8F:68:29:EC:3C:0D:42:9B:DB:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6CB72D942B957CA63E8B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50dc840-056e-3ed5-a4f5-597074912946.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.17.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:cb:72:d9:42:b9:57:ca:63:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=81ea8284-9aa1-4872-8b45-efea31a82a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:92:16:fd:03:d6:f5:0e:72:35:5b:89:82:
                    53:bc:89:bb:23:ca:fe:a0:ba:6a:7c:71:ac:b8:a8:
                    aa:a0:5f:a4:50:eb:55:80:2d:83:15:17:fe:07:41:
                    ad:4b:e9:b9:18:78:57:1f:29:6f:de:29:20:22:7c:
                    ef:c1:8d:48:f3:6a:b6:cc:cc:5f:53:e2:3b:b3:6f:
                    14:d3:27:5b:32:bb:5c:10:81:1d:56:df:14:c9:7f:
                    ad:b9:3c:84:f6:e0:3c:d2:9a:94:d4:3b:d4:d4:76:
                    61:e1:71:e1:fb:ae:d0:f3:24:06:b4:c8:dc:b3:71:
                    b8:19:09:66:02:82:61:c9:56:00:c7:8c:18:4f:52:
                    3c:b3:6b:8e:6d:99:37:5d:80:2e:c9:78:61:52:87:
                    53:67:17:41:91:6b:31:19:73:75:26:7e:18:d0:17:
                    dd:b2:13:dc:1c:dc:56:9f:1f:4c:06:e5:04:ec:18:
                    22:32:39:5c:52:42:1c:18:36:61:88:12:e4:d6:24:
                    63:6c:8e:9b:6b:9a:0d:38:77:5e:96:84:28:67:34:
                    56:77:4f:cb:0f:d4:fd:4b:e8:4a:03:5e:d5:81:42:
                    2f:97:f3:b5:d3:14:70:5a:c0:85:e0:f0:e8:de:c2:
                    52:a9:de:e5:39:01:b4:fc:d1:69:36:30:00:6d:b8:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:43:24:EC:0E:E9:3D:B7:5B:14:8F:68:29:EC:3C:0D:42:9B:DB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50dc840-056e-3ed5-a4f5-597074912946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:6e:52:1d:08:29:13:b4:8d:6f:a4:84:70:d4:7f:f1:35:
         0a:87:b6:27:17:82:d9:ed:a8:d7:3a:75:b1:2e:da:0c:eb:1d:
         18:1b:a3:c9:14:cc:f7:be:6b:52:39:27:19:0c:52:2c:a3:d8:
         9d:a0:4f:0a:88:62:4b:5b:a7:22:be:ce:f5:da:13:14:68:cd:
         e4:49:7b:a1:76:1b:23:57:6a:2d:3f:65:71:a9:cf:66:94:44:
         67:37:12:b3:11:91:ce:c3:b4:20:a3:bf:ee:f1:78:53:9d:c7:
         70:62:ad:f3:85:01:9c:52:da:3e:12:c3:48:f1:eb:6e:69:16:
         42:2e:ad:ce:26:dd:7d:89:42:b0:e4:bc:58:d5:a2:18:8a:21:
         f1:dc:13:24:06:60:fa:22:f1:78:6f:cf:fe:eb:bd:ee:dd:15:
         42:c8:fc:83:69:57:a4:13:11:8a:9d:56:6a:88:27:ab:5a:93:
         79:34:0d:19:5a:4c:34:14:93:40:c1:fa:a1:78:59:d6:f2:ce:
         f1:0c:d6:ed:e6:56:8b:12:b9:ff:6e:f9:73:0d:98:f5:75:48:
         e9:62:9d:ec:5a:50:73:ad:79:6d:69:01:7f:7b:1a:e6:ba:b4:
         51:98:4f:13:1e:16:39:6a:23:f9:f5:ba:0b:9d:f8:7a:b3:4d:
         33:46:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:04:09 2024 by rpki-client on console-ams.rpki-client.org