Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfeb1897-ef6a-34ff-b4f6-70af123cbb09.roa
File:                     bfeb1897-ef6a-34ff-b4f6-70af123cbb09.roa (raw, json)
Hash identifier:          iuKiE99QmDnZssF4g+4vrcrkNR7Y7qx4OEtyf7Xi+WQ=
Subject key identifier:   FB:27:18:1C:04:A3:39:B3:CC:3D:7A:0E:B0:85:02:7A:75:6E:EE:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E081BD41B8B46E6B77780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfeb1897-ef6a-34ff-b4f6-70af123cbb09.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.199.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:08:1b:d4:1b:8b:46:e6:b7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=37e0677d-8a75-4e3d-9a17-60273f00815b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:79:a6:4f:b3:fb:89:c2:4a:c8:19:a4:9b:
                    67:c6:b5:44:38:58:81:22:dc:a8:13:cf:7a:5f:c1:
                    51:70:9e:72:da:b8:d5:b5:dc:f5:82:1b:15:f1:15:
                    72:8c:bd:0b:86:f1:2d:f4:2b:65:77:fa:09:23:c3:
                    e9:56:72:88:8e:5c:87:59:90:9b:80:4d:a3:fd:f9:
                    2a:c0:f6:4b:a2:b8:57:c0:ad:ea:06:ce:b4:db:fb:
                    50:6c:8f:96:f0:a7:86:1e:90:08:63:ed:99:ec:06:
                    d5:ee:02:22:77:21:b0:15:f2:d0:44:26:2b:b9:7f:
                    08:11:dd:34:46:e4:4c:2f:2a:cf:8e:65:da:b5:6b:
                    04:c9:e1:43:c3:d3:6b:a7:ad:14:0c:8c:c8:c6:7f:
                    94:1a:5a:df:b5:ac:95:fd:45:dd:6e:e3:69:cd:8f:
                    1a:bf:08:63:76:88:dd:68:01:eb:60:40:f4:32:0d:
                    16:ba:a8:72:16:ab:d7:5c:e5:61:b7:2e:e5:01:e3:
                    6f:d2:66:3b:cd:8b:24:22:fa:e7:39:f2:0e:a3:56:
                    b1:66:25:06:d5:f5:b5:04:dc:77:52:7d:90:2b:8a:
                    94:6a:61:61:7e:04:0c:a4:45:b1:8e:07:73:90:d5:
                    08:ef:93:8a:28:fe:7c:c7:ff:3d:d7:48:e6:aa:ac:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:27:18:1C:04:A3:39:B3:CC:3D:7A:0E:B0:85:02:7A:75:6E:EE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfeb1897-ef6a-34ff-b4f6-70af123cbb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:05:bb:24:cf:58:f5:ef:8d:50:d0:0b:c7:df:ac:0b:94:ef:
         ce:bb:ec:cb:56:39:bb:d0:ec:9b:73:9a:c2:b7:7b:d5:4b:5c:
         82:b2:a5:4f:b8:f3:01:98:fa:3b:2b:4a:5c:25:5b:32:c4:d1:
         33:5e:b1:2a:3d:5c:01:1f:56:82:f8:5f:17:86:02:31:88:63:
         88:8c:0b:c9:1f:1f:86:4f:e3:7f:04:a9:51:49:db:c1:75:e4:
         ac:16:84:03:58:59:f9:44:d1:f6:8b:c1:67:76:fa:47:94:84:
         67:d5:e4:07:76:b6:1c:61:fb:a4:1c:c5:a1:c7:c3:ae:45:f7:
         a9:b9:cb:57:cc:22:7c:97:09:d1:89:8f:f2:ac:59:19:ed:f9:
         55:28:d6:a0:84:04:21:16:14:ed:bf:9e:63:ca:ab:2c:85:a2:
         4c:fc:b1:e6:b3:3b:9d:4f:59:3f:b9:c6:ec:59:24:a1:82:6b:
         c8:01:0f:e7:c6:3d:26:a4:1f:ad:31:d7:a0:b0:ba:44:9d:3e:
         69:85:22:ce:35:9a:47:96:99:58:a5:42:9d:b0:f3:c1:08:e4:
         44:28:65:e3:f0:0a:3a:46:28:6f:45:95:3d:94:49:38:54:85:
         ab:32:67:7e:84:23:12:9d:61:5b:5b:51:a8:3f:07:5c:5e:c4:
         66:28:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:33:53 2024 by rpki-client on console-fra.rpki-client.org