Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf4c94c0-2026-38b7-bccb-8b02d0fdc8c4.roa
File:                     cf4c94c0-2026-38b7-bccb-8b02d0fdc8c4.roa (raw, json)
Hash identifier:          TKPVzedgb/YmLbYkUTmBAa34L4mOHtZQXj6fkbciLjU=
Subject key identifier:   E0:01:A2:BB:61:65:8F:7C:9A:1A:73:F3:06:4E:F6:1E:26:0D:92:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117017E24D119967182809E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf4c94c0-2026-38b7-bccb-8b02d0fdc8c4.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.252.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:17:e2:4d:11:99:67:18:28:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=fa84bd4b-f6e1-414d-973b-797fd20f90cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:cf:85:ac:9f:99:30:63:b8:d3:3e:05:40:
                    d4:ff:41:a5:99:dc:51:c9:34:c6:6a:66:2f:22:15:
                    5f:0a:b3:db:83:84:cc:a8:b4:92:40:d1:fc:f2:ec:
                    82:7a:88:8e:2b:5e:fb:4c:55:b8:6e:5a:4a:e9:bb:
                    2a:9c:30:6a:00:a2:28:bf:94:a8:d1:57:c1:99:cc:
                    94:56:9b:0f:65:3c:a0:67:ab:bb:f5:b9:64:0a:1c:
                    01:ee:ef:83:b1:75:3a:a5:62:38:48:e1:25:34:63:
                    2c:cf:18:6d:cd:07:f6:9e:59:2e:0f:a5:b3:2e:be:
                    23:d2:ea:4e:9e:e9:a4:10:ec:ab:b8:34:9f:45:da:
                    24:83:32:ce:c5:78:f3:8e:7c:46:3d:73:b1:21:c4:
                    08:3b:80:36:69:e0:1f:f3:d5:b4:a0:f1:72:7b:65:
                    07:0c:bc:15:df:50:fc:1f:67:e9:e6:df:88:ed:46:
                    1e:fa:ed:2d:6a:28:e6:c6:44:05:4a:30:e6:5b:5d:
                    57:5a:53:51:c4:7e:31:99:7b:76:79:0e:d4:a3:b7:
                    e4:8a:02:9d:36:7a:2a:73:a5:aa:76:a1:12:05:e3:
                    82:a5:f6:fc:7f:b5:3d:15:ba:72:03:f3:b1:07:11:
                    b4:a8:17:b3:f5:92:f0:7f:d3:88:68:69:c9:64:a8:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:A2:BB:61:65:8F:7C:9A:1A:73:F3:06:4E:F6:1E:26:0D:92:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf4c94c0-2026-38b7-bccb-8b02d0fdc8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:27:b8:22:da:82:01:2f:fa:18:ce:57:98:d3:ca:0f:aa:cb:
         af:43:3d:c9:01:ab:0c:04:e7:b5:1e:75:cf:10:41:7a:33:bc:
         94:d9:ab:60:b9:c0:58:d8:44:2e:bb:2b:83:2e:73:df:e3:97:
         25:99:6a:30:d5:bd:61:4a:74:cc:30:64:6a:25:44:81:f3:56:
         9d:08:eb:09:15:39:83:2c:84:20:63:d8:e5:95:a6:49:ce:34:
         ff:c7:1e:28:6f:93:85:d4:2a:c0:4e:45:cc:5b:91:89:01:b8:
         b3:8f:fc:a9:93:0a:76:d9:57:7c:c8:ee:47:bf:48:9a:fa:71:
         6c:b6:93:af:0e:65:15:52:ad:28:b4:70:ea:c0:55:01:e1:76:
         58:41:bb:f5:1a:57:3e:ac:4f:58:54:b7:ae:fb:ed:b6:7c:a9:
         e7:03:c3:00:5d:ec:a5:ec:c2:81:a3:8e:97:93:eb:3a:7a:13:
         b6:b4:f4:44:10:cb:6b:88:35:71:4e:ff:25:e1:36:e7:06:54:
         05:d5:f8:28:43:82:76:51:e8:08:cb:4e:94:bf:71:42:98:f4:
         52:0c:70:f3:1d:73:e7:b7:bf:48:b7:26:50:98:62:a1:61:03:
         2d:0b:e5:13:6a:e4:b6:c6:79:80:b5:42:8e:7d:18:b6:65:0b:
         86:56:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:32:44 2024 by rpki-client on console-fra.rpki-client.org