Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd4f1a94-9945-36da-8520-537abe510487.roa
File:                     cd4f1a94-9945-36da-8520-537abe510487.roa (raw, json)
Hash identifier:          oSBEC5e5yG3lOjJPTZ4sVhHdhLMt0bKLYbT6VlbmyvM=
Subject key identifier:   44:4B:E6:4B:EB:2D:95:E7:5F:E9:F4:C9:B0:0D:AA:2C:A6:8E:07:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584811701895C286B34ED143B0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd4f1a94-9945-36da-8520-537abe510487.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.252.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:18:95:c2:86:b3:4e:d1:43:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=c1582cc7-26a8-4a84-a7d0-42bc4096e2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:8d:ff:31:2c:4c:91:a1:e9:3f:9d:5c:95:
                    81:b4:6e:ef:4b:2b:76:b3:43:f7:7d:90:0f:41:7a:
                    ee:90:2d:9c:a2:7c:ce:6b:f6:87:ce:a9:80:1b:4a:
                    ab:65:9d:48:de:f1:b4:86:20:15:09:04:93:95:60:
                    f8:5d:24:3b:4e:89:75:3e:8a:7a:90:68:12:16:cd:
                    83:5b:4b:0e:1c:20:97:ae:33:15:23:16:fe:a2:db:
                    e4:d3:82:1e:a8:13:8f:49:1f:f5:3f:68:ea:cd:bb:
                    81:41:de:96:41:23:7b:23:11:76:b5:f7:47:22:ac:
                    36:2b:95:fa:91:7f:a8:7d:81:16:88:c6:c4:1b:c2:
                    49:42:6d:9b:77:3f:90:89:3d:fc:1b:4c:37:8d:0f:
                    b4:ca:1a:7b:ca:86:7e:82:a4:69:8a:36:71:1f:df:
                    ac:d8:aa:9a:35:5a:29:a6:fd:b3:f2:14:bc:8e:45:
                    48:a4:9b:e8:e0:3d:05:47:d8:ff:98:26:af:e1:be:
                    83:d4:af:b0:e1:fd:c6:36:cd:e0:1e:bf:16:6d:6c:
                    fd:84:d0:63:ea:d0:96:73:00:e5:f1:5c:08:8a:94:
                    09:5e:15:66:1e:3a:e1:0f:57:f2:16:5c:5f:43:de:
                    1b:a2:63:fa:d5:a6:e0:d4:5d:75:14:2b:f5:88:fd:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:E6:4B:EB:2D:95:E7:5F:E9:F4:C9:B0:0D:AA:2C:A6:8E:07:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd4f1a94-9945-36da-8520-537abe510487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:49:66:dd:66:08:52:7b:52:d8:28:d3:f6:c7:fd:e3:08:19:
         26:13:29:67:80:3c:ad:ae:10:bb:c7:03:a5:07:cf:ff:b0:0c:
         2c:ad:a3:0d:c3:3e:4c:70:d8:17:d2:9a:ad:67:79:29:9a:89:
         0d:3d:8f:ad:10:92:ce:9d:e8:42:23:14:b8:9a:2e:23:78:4e:
         aa:1d:19:28:13:65:be:65:15:2f:0a:a2:e6:b0:cc:f2:1a:5d:
         30:31:f7:ff:97:7b:46:df:c6:7b:b5:ea:ae:82:d7:e3:60:7f:
         87:69:45:cc:b4:59:dd:df:31:3c:f3:00:e9:6b:51:40:4a:eb:
         39:09:b5:e7:37:60:b3:99:ec:b5:87:48:f0:8f:f1:de:3e:9d:
         bc:41:d4:79:c2:9b:21:50:16:63:41:cd:9e:af:09:58:3a:92:
         f6:90:45:2f:34:49:24:00:1e:96:f7:66:d6:b4:14:ab:dc:dc:
         5b:f1:27:6b:a3:7c:77:e5:f5:07:f4:de:3b:18:15:5b:aa:b0:
         0b:0f:f6:57:ed:20:b9:2f:5b:da:85:63:49:45:92:e1:3a:76:
         95:12:1c:18:9a:61:d6:6a:86:24:8f:97:ea:5a:13:a2:26:a3:
         be:f1:95:35:48:b0:9d:bf:3c:28:31:a2:6f:b9:db:07:6c:f6:
         cd:cd:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:32:25 2024 by rpki-client on console-fra.rpki-client.org