Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd58c8d-df84-34e4-b6de-da7c7f95cb93.roa
File:                     bfd58c8d-df84-34e4-b6de-da7c7f95cb93.roa (raw, json)
Hash identifier:          cm3TQwbPCIltTD+XEANJcaWDGv1K7D9CJX8FhLOpH50=
Subject key identifier:   F3:BE:D0:E4:6B:F9:AD:66:C0:DF:D1:F1:8A:62:90:00:E7:2D:BA:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D51A52534DA3F2D692080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd58c8d-df84-34e4-b6de-da7c7f95cb93.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.241.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:51:a5:25:34:da:3f:2d:69:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9428f7d5-f9ee-4b91-ba06-7c64b0c7c1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:56:40:5a:eb:e5:c1:4f:e9:cf:e2:c5:90:
                    4e:f8:d5:90:01:4a:2e:e9:b5:d5:67:28:5d:e8:68:
                    63:b5:73:27:31:10:0f:78:96:aa:15:7b:d2:00:9a:
                    ac:fe:68:47:f6:b8:43:94:0e:a5:52:49:2d:39:19:
                    dd:14:37:aa:5e:d2:a7:ba:e7:44:53:b5:93:c2:69:
                    d2:d5:e7:02:d7:44:19:50:f5:d5:d9:f7:03:ed:6d:
                    a5:4f:e9:2f:81:1a:ee:2c:d1:de:c3:9c:7a:e6:79:
                    ef:25:46:07:08:3b:b5:d3:82:e4:1b:a8:54:83:12:
                    62:a8:f6:d9:16:24:1f:d6:e2:60:e0:8e:ed:c0:3d:
                    0a:81:72:60:39:fa:71:a2:e8:dc:ae:9a:35:25:1f:
                    5e:b2:27:97:ff:cd:07:28:e1:cf:6a:22:9f:51:69:
                    1e:7b:a5:37:cb:e1:89:1d:53:9e:a0:14:d2:01:2e:
                    38:ae:d9:fa:39:82:e1:33:01:1f:a0:e5:2b:1e:0b:
                    a0:0b:02:3b:1c:b0:16:80:bc:bb:b6:52:7d:ea:0c:
                    96:21:1c:11:51:7a:c6:df:e2:dd:66:90:13:e6:8c:
                    3e:2a:fa:b7:4f:d4:c9:dc:6d:70:bd:a9:ca:00:e2:
                    b3:ea:d9:26:2f:96:a7:f0:56:f2:dd:81:83:dc:fd:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BE:D0:E4:6B:F9:AD:66:C0:DF:D1:F1:8A:62:90:00:E7:2D:BA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd58c8d-df84-34e4-b6de-da7c7f95cb93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.241.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f5:ff:e6:44:0d:3a:e3:83:d2:b1:17:63:98:28:4b:8b:26:
         1c:64:51:8e:6d:46:5b:1d:18:32:2a:3a:e2:f0:f5:3b:2b:52:
         61:1e:ac:40:d8:0d:b3:3a:61:a7:f4:19:ef:e1:94:7d:a5:1b:
         7f:0b:12:3d:fb:b8:69:a5:32:f9:5d:c1:21:67:af:ba:bb:58:
         e3:8e:f2:fb:25:1e:e0:41:7e:1f:ec:5e:c9:c3:01:bd:9b:0c:
         3c:98:e2:16:82:75:a4:81:b5:ec:c0:71:ec:43:e1:42:54:38:
         f1:8d:15:89:7a:2b:22:ce:51:8e:d3:27:1d:97:15:53:c9:6f:
         83:7b:2b:52:64:d5:26:08:46:ed:4e:75:75:11:8d:df:c8:11:
         a6:c5:64:1b:d0:a6:40:9a:3d:83:65:52:9c:95:80:66:1a:98:
         9f:db:56:b3:1d:dc:19:26:92:32:9f:14:0a:f9:79:3b:65:ca:
         09:02:43:eb:c2:7c:98:70:d8:ee:11:4b:49:a8:56:08:58:59:
         13:a5:07:d2:45:d6:4d:55:ee:cf:96:cd:a6:6e:b9:55:4f:bd:
         bb:ef:93:88:0a:ff:ed:b5:c2:4e:16:d0:19:12:59:72:c4:bc:
         9d:13:f0:ec:4a:9e:40:b0:62:f0:30:22:68:73:f6:e6:aa:3e:
         87:e6:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:03 2024 by rpki-client on console-ams.rpki-client.org