Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa
File:                     c3798f3e-de81-3298-989f-23615054fc88.roa (raw, json)
Hash identifier:          1dKqUgjBwdKxm28ahCaZdiCueldMWtUEY/4PK5xbwfY=
Subject key identifier:   61:F2:9A:0F:3A:81:4C:CB:79:4A:48:D9:AA:29:42:C4:29:3F:CC:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E85B79CCB72D51E81BCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.160.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:85:b7:9c:cb:72:d5:1e:81:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=561cf8b4-807c-45b8-8f22-40d9b36f3649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:ea:72:e5:dc:f3:ef:66:ab:38:5d:84:f1:
                    4c:74:d3:e6:a9:09:4e:fb:db:55:32:f5:d8:43:90:
                    f2:ee:b6:96:b5:9a:2a:51:81:1a:96:a5:21:c0:d0:
                    c6:8b:e7:bc:bb:21:74:c9:e6:f6:e6:8a:74:8e:db:
                    f0:0a:7d:ed:7e:59:85:e9:21:74:5b:52:09:6a:bf:
                    27:20:b6:1f:ee:20:31:31:39:de:7e:38:b4:a6:6f:
                    42:dd:73:d4:a3:22:61:7f:fb:a3:3d:9f:df:48:58:
                    b1:7e:1e:98:c5:22:93:34:dc:ca:b1:d0:14:99:91:
                    dc:46:48:57:6c:13:0c:87:74:66:d9:e5:b7:f0:9d:
                    ff:89:7b:61:80:8c:11:92:30:ca:bc:c7:2a:23:de:
                    e4:31:20:ee:62:d1:d7:46:99:60:31:95:91:68:b5:
                    b4:83:25:67:02:1e:fc:e5:57:b4:5c:cb:49:13:33:
                    1e:dd:44:1e:fb:46:e6:1a:c9:8b:3f:b2:ab:d0:d4:
                    80:91:73:b6:05:8e:84:a2:6c:41:9c:38:1f:65:4e:
                    7e:fc:02:d4:84:3b:a4:6d:d3:98:31:3f:69:7b:11:
                    65:9b:2a:ad:b2:6e:ec:a6:09:65:66:ec:23:33:91:
                    e3:7a:ea:1d:2b:58:ba:0f:a0:44:79:12:cc:21:f6:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F2:9A:0F:3A:81:4C:CB:79:4A:48:D9:AA:29:42:C4:29:3F:CC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:d7:89:75:b2:92:8c:45:fc:49:13:83:d5:ce:9c:1e:7f:
         2b:36:cc:94:03:d1:0e:d2:97:72:e0:d9:38:dc:c6:20:9b:a7:
         2b:eb:3e:51:af:da:0a:51:93:86:38:da:81:96:49:6a:17:7d:
         fd:2a:01:92:be:6c:2f:86:a5:f1:d1:9f:e8:4a:1e:42:b4:ea:
         ac:12:01:22:ab:02:c2:ee:1d:ba:ba:91:d2:35:bb:d4:83:f4:
         87:43:ca:51:e0:94:a4:c9:ad:1a:2e:3f:7f:ae:c7:2e:ce:6c:
         4d:8c:9a:e1:4d:37:ab:5e:3c:82:aa:5c:16:ed:53:52:06:36:
         56:dc:44:1c:8a:b8:09:08:e0:1b:e9:64:3c:82:af:3b:21:7a:
         73:63:a7:94:63:af:e3:81:62:67:9f:a7:df:0e:2c:9a:2c:38:
         02:91:95:db:d8:19:d3:1f:66:a9:c3:20:29:bd:72:18:ca:59:
         d6:60:92:4e:4d:13:cf:b8:ae:0f:8c:26:0d:62:1b:c0:65:25:
         32:8c:85:ab:97:0d:2b:e7:80:94:f9:76:31:9e:fb:2c:8e:e6:
         9c:de:99:a1:10:8d:cc:46:af:61:5d:57:a9:03:b2:f0:94:0c:
         d5:b7:ff:13:1b:66:69:99:75:89:33:a3:43:ed:ca:b9:e9:c8:
         1b:5c:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:34:11 2024 by rpki-client on console-fra.rpki-client.org