Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3181b2f-ebb9-390f-a4d3-25d0a9e1f45a.roa
File:                     c3181b2f-ebb9-390f-a4d3-25d0a9e1f45a.roa (raw, json)
Hash identifier:          9o4QsP6mhdiB85iDfT0Kb8WNAPOAqDhw4GPv5HHFGZQ=
Subject key identifier:   75:32:B6:DE:88:4B:69:88:F3:07:9A:74:25:E7:0C:58:36:F5:AE:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E8074FBBE4B48B64C5080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3181b2f-ebb9-390f-a4d3-25d0a9e1f45a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.38.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:80:74:fb:be:4b:48:b6:4c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=2377713d-027b-48db-8dfa-a7f2ffb628bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:57:e9:28:50:90:5e:88:7f:1b:39:ea:0b:
                    78:5b:fa:ce:4c:39:6a:78:4b:17:42:7b:c0:80:84:
                    d7:98:58:29:2c:b3:e5:77:09:d7:0e:4f:ab:cc:0f:
                    b8:e9:2e:77:25:0d:aa:b4:b9:e0:07:f3:be:96:23:
                    2b:95:60:97:4a:81:96:4e:f5:00:5c:8d:cf:32:ef:
                    b3:55:cf:03:76:1f:96:f2:ed:ad:eb:ee:e8:d6:1e:
                    c6:5c:8f:4b:da:cc:62:ad:21:7e:16:5b:1e:ca:3f:
                    e0:15:f9:89:c1:85:f8:0d:93:fa:2a:ed:0e:6c:96:
                    7b:08:9c:49:e9:64:8a:d6:53:4f:5d:62:4a:b3:b3:
                    5f:7b:80:88:24:e3:00:33:86:93:13:91:d3:e4:d2:
                    a1:f4:17:f0:d8:47:ba:8c:dd:23:52:a8:9c:d6:68:
                    0a:b6:c1:30:49:53:0b:18:2e:ee:7d:10:9b:b3:b3:
                    a4:a4:0c:12:43:67:a4:b4:08:29:fc:40:9d:e8:8f:
                    f6:d8:7e:3e:bb:26:a4:a0:4d:7d:92:3c:b4:01:15:
                    1b:51:50:bc:8b:d9:6a:00:bc:99:b0:77:28:9f:a1:
                    2c:e1:a5:aa:55:fd:b0:90:0b:a9:a8:53:f8:de:5e:
                    9b:8b:24:c3:cb:4a:9d:d9:1e:25:2c:e7:b3:a9:44:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:B6:DE:88:4B:69:88:F3:07:9A:74:25:E7:0C:58:36:F5:AE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3181b2f-ebb9-390f-a4d3-25d0a9e1f45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:3f:5c:d2:10:6d:63:9c:14:b8:bf:07:af:50:97:a2:20:
         af:26:5a:52:39:0f:d1:34:38:96:96:06:11:14:e3:52:ad:01:
         0b:f5:e5:a4:a8:e9:a6:a1:2c:e8:04:2f:9f:2d:b0:b1:c4:b1:
         ef:f9:ea:1f:90:32:b1:b6:02:48:f4:fe:1a:3b:66:ac:69:38:
         ad:6d:5e:98:f1:a0:d1:99:04:62:02:8b:be:0a:99:14:a7:19:
         0d:e6:92:7e:92:e8:33:23:37:87:5e:d4:b4:c0:f7:67:f5:89:
         c9:8d:6c:e7:a5:ea:b9:f2:53:b3:ab:65:a0:c1:c1:77:31:42:
         83:4c:5c:b2:8a:7d:9c:b8:11:90:72:d0:45:b4:57:89:34:7f:
         e8:73:55:89:dc:30:8b:35:50:87:bb:2f:42:9f:1c:2e:04:42:
         13:06:f1:13:3a:06:a8:b6:96:e4:b2:26:ed:3b:3b:25:df:c8:
         08:f0:e6:40:19:f4:0e:d4:c8:35:4e:61:08:52:b9:0e:9b:4e:
         7c:48:80:31:47:d1:c0:c4:2c:07:f4:ab:f7:6e:f9:39:c0:d8:
         b1:1b:9e:3f:c1:81:64:e6:de:92:97:94:e6:97:25:90:59:9e:
         48:8d:fe:65:53:f9:a4:d4:36:53:c6:b9:f6:f8:06:d3:79:22:
         cf:5a:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:53 2025 by rpki-client