Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa
File:                     c683c1a2-0779-391c-850c-ce70f6c0222a.roa (raw, json)
Hash identifier:          ndz/ChxMTgTrfzOtcVs/21zz/0XuS/o5JFHt7MpwRCs=
Subject key identifier:   7A:2A:60:AB:C9:DB:D8:14:03:41:0D:70:AF:28:77:58:2E:11:7F:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1087FAEDF93CBE85583900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.248.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:87:fa:ed:f9:3c:be:85:58:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=764608c7-7b7a-49ba-9801-91f5b92a4c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:f2:86:03:9a:4a:d5:c5:8e:06:29:6f:d4:
                    8b:23:c6:79:25:71:1e:af:fd:d3:c9:45:4d:a5:9d:
                    a5:4c:80:fa:c6:ef:14:26:1a:c2:50:d7:88:26:b9:
                    12:8f:c1:73:aa:ce:7c:66:49:b5:e9:2d:63:89:42:
                    a6:24:bb:93:6e:3f:25:d7:23:74:fc:1d:d1:38:2d:
                    f0:2c:2b:22:2f:06:8b:7f:8b:09:76:8d:59:df:4e:
                    c9:02:3e:4f:10:13:24:72:2c:49:1c:10:ef:d7:4b:
                    b4:58:ec:64:5b:b0:26:ab:67:9c:32:a4:0f:6e:4b:
                    ea:6a:e0:9f:bd:31:87:db:9e:9f:1b:14:f4:d5:42:
                    e2:3f:52:3d:5a:5f:bb:66:1c:f5:aa:2f:66:e1:b8:
                    15:5e:09:45:92:73:b8:39:c3:02:d9:f1:cb:b4:41:
                    18:4b:e3:63:47:e1:07:ec:44:84:ea:6d:25:95:0b:
                    88:8b:7e:e2:2a:b5:40:a8:72:70:f3:7d:ec:79:a5:
                    9b:6a:8b:82:be:00:05:9a:78:b9:95:7e:6f:a5:f4:
                    84:fd:37:2c:8c:7f:b1:7d:9f:10:3e:62:9e:4d:91:
                    45:60:d5:06:d0:5d:15:1c:2a:02:91:ec:43:52:ce:
                    a7:44:32:d3:97:83:95:dd:0b:2b:2e:50:e5:f7:d3:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:60:AB:C9:DB:D8:14:03:41:0D:70:AF:28:77:58:2E:11:7F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:c5:bf:ba:48:dc:4f:75:14:71:8e:e8:cd:a9:33:16:57:
         6d:6f:17:ea:10:55:ca:3f:e5:11:e0:25:62:b4:c3:3e:24:09:
         fe:d4:e5:37:7a:28:4e:ee:f5:bf:81:db:f1:e0:05:78:a0:cc:
         02:e0:41:38:69:ac:87:36:75:96:0f:77:c9:23:a3:3d:23:bb:
         d9:da:e1:05:b0:0c:88:f4:c5:00:d2:c8:9c:9a:88:25:d8:dd:
         06:57:4e:ec:f3:06:c6:59:f9:4c:59:1b:7d:e1:0c:1a:a5:a5:
         5b:eb:10:41:8e:72:5a:dd:e3:b2:f7:cc:bd:ee:3e:b4:d8:5d:
         ce:62:84:26:64:b5:2c:4e:0c:45:ca:11:00:6b:b8:fd:df:d4:
         a2:1b:0a:fd:25:20:ce:41:84:c1:74:5b:4c:13:ca:36:f2:a2:
         43:c1:34:28:be:40:14:10:3a:63:d0:75:8c:af:77:78:f1:23:
         34:15:f1:0d:4e:96:30:65:49:9a:7d:8c:8d:e7:4e:65:3a:7e:
         e9:f3:26:84:f3:64:25:7b:0a:93:1f:72:e8:fe:93:88:91:0c:
         02:8b:18:52:8a:42:51:89:08:77:8a:80:02:c3:68:b2:52:aa:
         a5:78:57:a4:a5:e6:c1:1f:d2:2a:14:ff:34:6b:07:21:5a:be:
         74:32:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:16 2025 by rpki-client