Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa
File:                     bf128436-e8ce-3a1d-b089-331de67eaa10.roa (raw, json)
Hash identifier:          QSOJEUlsG+W2v64eQfAr/TTAUn5iunWDcIJ+LMZp6BQ=
Subject key identifier:   23:F5:C6:41:77:B9:F6:D0:67:E0:3B:C1:68:CD:A7:BC:CD:44:AC:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C06E0F33CE59E3C0CCD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.103.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:06:e0:f3:3c:e5:9e:3c:0c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=00a69dd9-03b9-469b-8f1a-46e9e4c1e489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:37:95:73:33:a5:22:f0:8a:91:d5:b1:f7:
                    9f:a5:96:42:e6:68:b4:2c:df:be:eb:84:19:40:ed:
                    25:5a:93:57:a5:d4:f1:dc:b0:fc:d3:90:2f:b3:ce:
                    97:f3:a2:cb:f9:2a:0d:e1:d1:32:7a:d7:b4:a2:cc:
                    c3:7d:6f:84:11:ca:5f:5a:65:0d:b9:ed:02:a6:7c:
                    b2:f7:14:e7:d2:89:12:f0:96:37:fd:c3:7f:6a:25:
                    b5:a0:8e:19:36:6a:0c:18:99:59:00:4c:cb:e7:67:
                    e7:5b:d3:6f:1c:ec:cb:53:bf:c3:93:5f:ad:7a:79:
                    a8:43:bd:8c:5a:70:05:da:71:de:68:e0:29:57:25:
                    0e:50:63:ff:06:88:b3:81:ab:2c:ba:20:b6:11:5f:
                    15:d9:6e:b3:7a:ae:98:0f:7e:ec:1c:c4:c3:e3:43:
                    99:dd:db:23:a4:9c:f9:b3:f1:e8:fb:be:dc:04:8d:
                    8b:06:fd:2d:e1:a2:a6:59:93:6a:2a:5c:36:8d:58:
                    ab:b9:5e:ac:b8:fb:c8:e8:a7:62:60:79:c0:32:b5:
                    3d:2c:5d:74:a0:23:04:f6:9b:3d:bf:66:19:b7:9a:
                    ce:cd:07:29:5c:cc:91:e5:79:cc:37:24:31:e4:c4:
                    f1:c8:49:e7:07:9b:87:a7:e8:06:22:ed:e7:8a:03:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F5:C6:41:77:B9:F6:D0:67:E0:3B:C1:68:CD:A7:BC:CD:44:AC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.103.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:60:10:7d:02:8a:22:36:29:35:9e:74:45:bf:7f:a2:7d:6b:
         d0:1d:b9:48:ea:03:90:6a:3f:4e:c1:8d:c1:36:dc:0c:3f:27:
         9c:33:0a:7e:0a:0b:35:fb:ba:b0:bb:a4:0e:41:92:93:f5:8b:
         a6:a9:c4:4a:1d:89:61:c0:56:8b:c4:3f:36:5a:73:71:eb:38:
         a3:a8:32:0f:86:59:7b:3a:40:75:cc:eb:28:97:8a:2d:08:37:
         4b:87:58:0b:37:fb:a1:67:79:ff:44:56:c9:0f:12:3d:b8:86:
         50:f6:ae:65:24:b9:28:cd:ab:13:e9:6c:e3:45:b8:2a:1d:e2:
         19:53:6f:30:4c:a1:81:1a:bb:03:49:77:38:92:12:42:91:f4:
         c5:23:3e:35:dd:cc:36:4f:15:26:e8:58:b6:3a:a3:77:03:26:
         26:df:68:0f:d2:79:12:ea:d6:b1:95:80:49:21:f3:ac:84:96:
         12:66:10:04:ce:4a:2f:79:8b:15:ee:2d:8d:16:4f:96:6c:dd:
         1e:78:3c:5a:55:38:85:d1:75:ef:e8:9a:18:3b:4a:0f:a4:cf:
         61:74:2d:9d:d2:3c:54:f4:4b:7d:31:6e:cb:00:a7:aa:ee:61:
         5a:a4:2c:7e:40:c4:6c:f4:94:a0:3d:49:e0:e1:42:9c:f4:32:
         98:a3:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:29:58 2024 by rpki-client on console-fra.rpki-client.org