Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa
File:                     b948726f-90bb-3f1d-a797-9980277b05db.roa (raw, json)
Hash identifier:          kbgkmNH/Dv2jjcOWCT/0I+xbQ7jOzP4zr144chPybno=
Subject key identifier:   9F:76:1F:75:D3:F4:60:49:05:6D:71:27:CF:08:7C:0F:72:8E:01:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8909284595757F2416FA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.112.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:09:28:45:95:75:7f:24:16:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f8367d89-cfd4-41a7-8c60-b28c174577a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:2f:2b:b2:e9:38:7d:45:05:83:b1:72:c5:
                    28:8e:fd:e3:5b:7d:ac:05:ef:b5:2d:c2:b4:cd:09:
                    ac:a4:f0:50:c8:c2:15:38:a5:98:7d:8a:07:0d:38:
                    30:ee:db:22:1b:30:1f:be:9c:47:94:ed:7c:21:36:
                    77:20:38:01:b3:f8:72:19:89:34:09:47:6e:69:42:
                    0c:09:91:ee:4a:d6:22:b8:ab:4f:71:4e:22:4d:f4:
                    c3:cd:bf:fc:da:68:58:24:d0:02:d8:0a:11:4b:60:
                    b7:db:18:03:94:92:42:05:5a:39:86:0e:73:73:84:
                    c7:65:08:f6:a0:78:fe:1d:37:69:07:51:5a:3e:c4:
                    5b:4c:a3:5e:b7:3f:04:1f:15:27:fb:0c:bb:df:18:
                    0a:4e:a7:97:47:73:f2:01:cb:ae:92:0d:f7:71:5d:
                    ba:95:2c:52:99:cd:40:a8:8a:b1:63:2c:65:79:07:
                    9a:57:5e:ff:bc:c2:89:04:1c:e6:92:f8:70:e8:c0:
                    17:e9:39:4f:bf:56:35:c2:ad:c3:be:c1:e9:2b:31:
                    b6:45:af:aa:61:cd:f5:82:a4:1b:62:57:5a:a4:32:
                    3a:39:46:2b:54:d1:94:92:c0:2f:98:cd:a1:48:3f:
                    c8:e3:52:0e:b3:72:3e:58:25:76:20:59:4f:de:26:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:1F:75:D3:F4:60:49:05:6D:71:27:CF:08:7C:0F:72:8E:01:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:67:e0:a4:c7:53:50:c4:e6:43:a6:c1:4c:13:3c:2a:d8:9b:
         5e:58:f0:5a:c7:90:2a:26:b2:c8:8f:77:e6:9b:5e:84:04:d9:
         78:fa:c7:b7:2d:81:e3:08:39:00:bb:63:d3:ab:ff:fe:c7:ac:
         78:83:75:72:d8:54:d1:c0:33:7d:06:3e:73:39:58:d6:80:df:
         51:48:85:3a:25:86:3e:48:f6:c0:ad:2a:a6:67:50:f8:c1:59:
         d7:58:31:7f:29:29:c3:07:5a:77:61:28:ba:e0:e1:53:be:f8:
         5f:f8:9d:1c:fc:db:f4:d6:44:eb:dc:78:d0:3c:4a:ec:80:fb:
         83:06:9d:a3:07:30:cc:4d:7f:58:eb:15:53:2b:94:ad:f9:54:
         88:9f:5d:16:58:4a:bd:fc:a3:c8:2f:dc:4e:b8:9e:47:21:e7:
         d3:b4:7a:d6:f5:34:33:f2:16:15:46:3b:96:fd:13:f6:83:c5:
         62:67:4b:01:ef:f4:f1:1b:66:0d:96:87:1f:c6:dc:15:f2:c9:
         ce:6c:63:71:90:3d:76:41:09:80:3a:cb:96:a9:76:dc:1c:bb:
         86:06:9c:88:b5:42:11:12:c3:70:ae:b7:ef:a2:4a:97:78:e0:
         5b:9f:b6:17:b7:cd:9b:db:9b:21:23:57:72:35:3d:35:69:95:
         40:e2:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:56:45 2024 by rpki-client on console-ams.rpki-client.org