Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6973daa-fe9b-3629-b2f8-8822e31b7fa2.roa
File:                     c6973daa-fe9b-3629-b2f8-8822e31b7fa2.roa (raw, json)
Hash identifier:          GNrB4UCfqP9EsHHWNdSoCnfK9WcOuBdNxCbc3z3190I=
Subject key identifier:   CD:20:BE:38:6B:60:B6:2B:89:F9:AD:38:FA:07:A4:8C:96:56:38:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C465592363F6BFD35C400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6973daa-fe9b-3629-b2f8-8822e31b7fa2.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.247.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:46:55:92:36:3f:6b:fd:35:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ef8444e9-a715-44b4-a24f-7ad173db3dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:78:d4:6f:d9:13:e6:25:cc:86:6c:10:28:
                    9c:33:42:e1:ce:69:dc:e8:95:21:5f:f9:bc:af:c6:
                    d6:3b:3e:c9:ac:a3:99:8f:2a:dc:cf:33:38:3a:4e:
                    f5:e9:ee:19:45:d6:bb:42:a5:68:21:45:a8:c6:52:
                    09:6b:b2:fd:8c:ea:88:c4:35:cc:52:4f:b4:b3:d3:
                    05:b4:f0:fd:d4:af:63:9a:4d:92:e2:ff:51:7e:6e:
                    5d:bf:78:26:69:a7:aa:c1:cf:94:9f:c8:4f:da:e4:
                    fb:12:73:27:3e:01:26:69:5e:0d:82:78:9d:60:43:
                    01:a4:f2:2a:e3:fc:e7:5d:84:c5:10:f8:ba:12:15:
                    94:6d:3e:1c:c9:be:36:e1:fc:e5:07:13:86:40:19:
                    e3:4f:81:3e:44:19:0a:85:ec:ed:3a:b2:ac:7a:d2:
                    de:e5:43:dd:e0:77:7c:e7:69:8c:0e:de:13:91:9b:
                    04:95:74:4b:83:a9:dd:32:0f:37:50:f6:1f:58:3b:
                    f4:d5:53:b4:b8:f4:80:31:77:cd:c6:89:04:be:87:
                    65:df:ab:84:cf:73:c6:61:6a:41:a5:70:94:80:44:
                    63:3c:33:a1:89:0f:99:7c:90:2a:98:3f:19:e0:fa:
                    f7:8a:48:a2:a2:a3:31:92:e6:99:db:eb:8f:b5:28:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:BE:38:6B:60:B6:2B:89:F9:AD:38:FA:07:A4:8C:96:56:38:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6973daa-fe9b-3629-b2f8-8822e31b7fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:65:4b:e5:a6:58:fb:3c:51:80:20:ce:8f:b8:25:a3:d2:
         50:a8:a2:d8:db:b9:1e:be:46:ff:46:cb:96:27:cf:e0:01:a4:
         af:e6:d7:ca:35:03:4b:9d:fc:1b:bb:4f:a6:7b:e8:80:54:2f:
         ac:85:bd:96:83:e3:b7:51:fa:32:ff:ec:73:42:37:b3:32:05:
         ff:5a:66:c6:2d:e8:8a:3c:9a:d0:e0:d0:95:4d:db:a4:e1:ed:
         33:2f:09:90:bb:d6:c4:e8:95:8a:3f:de:04:21:de:c0:94:18:
         d9:8d:dd:7d:f3:97:bb:18:b0:f9:e4:50:a1:ad:c4:94:9f:c5:
         6b:2d:27:64:4f:ea:d4:12:c2:38:9e:88:46:0d:9a:e1:4a:4c:
         a5:09:50:0a:0b:e2:01:3b:50:bd:2d:34:5a:15:15:fc:31:a5:
         dc:c7:0e:a6:e9:91:19:5e:9b:f5:67:1c:fe:da:ab:d8:af:a9:
         cc:f7:30:35:89:7a:e8:33:40:a6:9c:72:a8:04:ec:85:59:16:
         5a:66:3e:19:ad:2a:2f:68:28:92:bb:99:be:14:70:31:3c:42:
         95:ef:6d:2d:6c:63:4f:f8:13:de:f9:16:16:27:9b:d8:16:6f:
         75:10:28:bf:9b:fc:0c:49:79:1c:0b:5b:a5:38:b6:87:af:1a:
         c7:7b:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:31:16 2024 by rpki-client on console-fra.rpki-client.org