Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd6a5594-4069-3319-9821-9918bb6b5de3.roa
File:                     bd6a5594-4069-3319-9821-9918bb6b5de3.roa (raw, json)
Hash identifier:          zFSpSJKiWrBsKRk0YeKi/BWzdW34eZ9dCom96kXbIhQ=
Subject key identifier:   7C:8E:5A:1D:CC:9C:3D:9A:E1:1C:35:65:D9:83:A7:EB:16:D4:79:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C5ECF2DF0BEDB2303DA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd6a5594-4069-3319-9821-9918bb6b5de3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.50.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:5e:cf:2d:f0:be:db:23:03:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=09e8b55b-7234-4991-80bc-f16a2a27f22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:a0:a8:91:33:6b:a4:36:9b:8a:53:62:02:
                    57:a5:0f:d2:df:89:91:7c:04:48:67:f6:b6:91:22:
                    fb:6a:cc:ea:44:5d:d1:3f:d3:ef:bf:ca:96:9e:2b:
                    82:30:98:e6:7f:6b:09:22:37:47:0b:ab:2a:eb:e6:
                    af:85:2f:8a:e1:39:cc:9a:4c:16:20:53:dc:e6:74:
                    0f:99:30:71:e5:a0:51:1d:0e:e8:d9:74:9e:46:59:
                    fc:3b:4a:f9:f9:3d:6a:e6:71:a9:f5:10:47:82:3b:
                    0e:72:64:84:ab:ed:cf:9e:ac:c2:b1:b6:f2:ef:92:
                    98:47:39:a9:95:54:33:41:d7:34:fc:d8:70:ce:6e:
                    ab:9a:07:87:2d:6b:62:b4:be:84:61:df:13:8e:8b:
                    bc:b3:5c:4e:3d:f9:94:3a:dc:eb:36:7d:46:19:87:
                    bf:8e:78:5c:f7:5c:aa:45:88:59:f6:2b:43:f5:7c:
                    e7:e1:b6:c9:1e:06:37:92:5b:d9:f6:b0:e0:37:41:
                    eb:72:7a:43:53:76:fe:64:19:89:2a:0f:a1:ca:32:
                    11:7f:c9:d9:ab:66:12:7b:e1:2b:49:ae:d8:94:b8:
                    9c:11:41:6d:e3:bf:ad:2f:db:25:6c:4e:11:34:6f:
                    59:aa:52:f4:35:bc:3b:e8:6d:cd:78:c1:65:10:c5:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:5A:1D:CC:9C:3D:9A:E1:1C:35:65:D9:83:A7:EB:16:D4:79:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd6a5594-4069-3319-9821-9918bb6b5de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:71:fd:c9:0f:2b:21:89:1d:96:ff:f0:80:fd:be:86:38:81:
         11:3e:7c:5a:ce:43:1d:f7:d3:ed:aa:fc:0d:b2:d6:7b:be:64:
         7e:38:ac:a9:0f:e5:35:ec:4a:87:d8:06:cd:c1:6c:d7:d4:6c:
         17:8d:6a:ef:92:ec:fc:e8:6a:a3:5d:bc:27:c6:c0:e0:9d:b8:
         15:a0:62:b2:7c:f3:12:bc:b4:cf:95:72:74:e1:c8:62:b2:49:
         2b:92:90:e9:2b:dd:41:86:6e:99:75:25:41:6e:14:c0:ae:56:
         0f:8b:5c:1b:24:b1:c1:5e:44:e6:44:60:95:02:85:f6:27:f0:
         25:46:e6:04:2d:9d:39:c8:5b:5e:08:31:25:73:4b:ef:59:c6:
         07:ff:b6:64:03:a2:78:39:89:f5:9a:28:4b:2a:9a:5c:d2:fc:
         4b:45:a9:d7:fa:75:c6:ce:8a:b2:4d:83:4e:95:11:8e:6b:94:
         94:6c:7f:e6:ec:59:d1:ce:cd:7f:ae:71:89:1f:a4:e3:17:94:
         6e:9f:e9:00:b5:ad:3e:b5:25:49:19:7a:62:fa:a0:a7:1a:e9:
         c3:a0:35:a6:15:29:f6:2d:97:88:f9:ea:47:6a:fa:d4:85:9e:
         99:50:38:d0:2f:8b:4c:f2:dd:ce:57:35:95:f8:3a:61:c9:8f:
         f6:e5:a5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:16:46 2024 by rpki-client on console-ams.rpki-client.org