Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb9e7bf0-2574-377a-9196-a057195523ba.roa
File:                     bb9e7bf0-2574-377a-9196-a057195523ba.roa (raw, json)
Hash identifier:          8rUu6LGEO/ujLYGGX4IfcKRLxDu3IDrf4Ax+cz4gdPY=
Subject key identifier:   DE:CD:C6:A6:F9:42:00:1A:DE:5D:85:C6:8D:CE:8F:03:3E:2C:91:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E389FE839B43B8E2C8980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb9e7bf0-2574-377a-9196-a057195523ba.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        73.195.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:38:9f:e8:39:b4:3b:8e:2c:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=519b0e39-8b74-4736-bfbd-d49d3480e453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:b2:3f:d6:e8:4c:26:9e:52:8d:b6:ad:07:
                    da:90:8e:bc:8b:f7:6e:50:a7:3a:6e:ff:1f:1b:93:
                    56:0f:ad:3d:8d:4f:ef:8c:fb:ad:fd:8c:23:1d:05:
                    b1:ba:ee:4e:3b:d4:5f:42:0b:4c:ae:25:65:7e:2e:
                    e0:ef:c4:ab:e2:9d:6c:f4:fd:59:db:bf:54:18:49:
                    0f:a3:5b:5b:42:93:cc:73:bd:d4:aa:89:c0:31:5d:
                    1a:c1:ce:7f:2d:7b:a8:b1:97:0a:13:5b:43:2b:fc:
                    af:1b:d2:12:9c:cb:03:05:4d:e8:34:b3:53:99:e1:
                    f3:6a:3b:7a:ef:92:53:ba:b6:b3:dd:61:55:02:9e:
                    10:ba:54:16:d2:54:24:49:49:b6:da:21:00:3a:b1:
                    49:bd:1a:44:48:76:de:f3:eb:f4:9e:a9:a6:8e:d3:
                    0e:f6:36:74:be:c2:b6:b5:fb:bb:ae:30:33:e3:1f:
                    3a:4b:b9:9c:07:34:f0:a3:c6:e3:75:19:88:5b:fe:
                    56:54:a3:c2:4c:55:a6:a5:e0:f9:47:78:b7:2b:f5:
                    a8:27:49:79:1d:92:64:a2:7e:f2:34:ac:5e:da:d9:
                    69:81:0e:64:18:9f:17:65:cf:8f:fb:ff:4f:95:15:
                    8c:29:1a:c4:7e:8b:ed:7e:cf:ce:d4:fd:18:db:58:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CD:C6:A6:F9:42:00:1A:DE:5D:85:C6:8D:CE:8F:03:3E:2C:91:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb9e7bf0-2574-377a-9196-a057195523ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:1d:f5:77:61:de:a0:28:0e:83:5c:53:1d:cc:0c:3f:98:
         1c:06:d7:34:2f:48:26:69:da:ac:b1:f6:2f:11:e6:c1:a0:a5:
         73:66:b5:27:96:35:fd:ae:e5:5b:65:08:3d:4d:81:35:48:bc:
         39:b4:5d:22:21:b1:9d:18:13:f7:69:da:c1:92:fc:b2:19:5e:
         c1:28:e4:e3:20:22:51:3e:62:d1:87:14:e7:42:3a:9e:b6:93:
         f0:a1:7c:d8:d4:89:8b:6f:7b:59:1c:47:5f:f0:2a:1f:72:ac:
         03:69:f5:3c:f5:fb:6c:1f:be:d5:9e:fd:e5:a5:8c:de:9a:9b:
         82:97:4e:75:4a:74:17:de:07:ac:20:d8:62:90:c8:37:29:7b:
         4b:64:d9:5f:5b:fd:04:a5:07:65:9b:64:62:47:50:8a:c7:ab:
         f0:f4:99:b4:6d:d1:76:ff:66:b0:28:65:68:ca:a0:2f:18:3c:
         88:4a:a0:bd:f6:2e:03:7f:1c:e8:2c:e1:07:e1:f8:00:6b:e1:
         2d:2f:02:81:d5:89:85:ef:0d:8f:f3:f9:00:9e:28:93:a8:a8:
         bf:c8:62:5f:7b:42:86:22:72:cd:2c:19:fd:4f:dc:6e:9d:cd:
         e6:32:06:e6:b9:d0:bc:94:ab:00:aa:10:10:3a:a7:ab:4c:45:
         29:a2:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:04:40 2024 by rpki-client on console-ams.rpki-client.org