Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0db3b69-4779-3473-906f-70622f90a421.roa
File:                     d0db3b69-4779-3473-906f-70622f90a421.roa (raw, json)
Hash identifier:          WDrJyZzM7XfeaQeVCaxBHM3GZ5G+xhepyvOKF74cYsA=
Subject key identifier:   2D:12:03:4E:7E:49:BB:C4:36:79:1F:A9:9F:E4:E4:BC:B5:97:86:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6A5F57BDAAD18AEB3B8C7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0db3b69-4779-3473-906f-70622f90a421.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.126.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:a5:f5:7b:da:ad:18:ae:b3:b8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=22a44ead-9136-43ec-bd37-398d6f0a199c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:05:ee:5d:1d:56:98:93:ca:03:0e:95:9c:
                    5b:d6:2f:04:5b:5f:99:01:e6:50:f0:ff:9a:ef:0f:
                    c3:b7:fc:f5:df:fe:27:87:0b:b3:78:d1:13:57:34:
                    ba:d9:74:db:7d:af:1d:10:08:24:2f:db:0d:81:d5:
                    3a:2f:55:2e:0a:32:43:32:65:fc:f7:75:2a:60:92:
                    24:ce:6b:a2:73:77:61:cb:c2:b7:2a:fd:43:96:54:
                    7a:61:b9:dd:4c:5a:8d:0c:0b:69:8b:c9:82:b9:99:
                    25:55:0c:fa:1d:4e:02:dd:a4:5b:d3:76:93:16:1f:
                    98:75:34:85:81:26:5a:f6:51:13:13:1b:ea:7b:1e:
                    5c:fe:41:46:e6:cc:2e:55:32:0a:40:42:7a:87:e4:
                    bb:09:58:c5:0c:11:36:89:d0:20:84:f1:c8:84:58:
                    61:76:37:e4:0c:b3:ec:f2:70:9c:80:75:18:5d:13:
                    24:78:7f:67:76:c0:cd:b0:17:e0:9a:62:28:76:8d:
                    71:39:ce:c8:ca:cc:08:45:4c:63:61:ce:08:00:9d:
                    40:e6:69:d1:f6:75:e1:b1:fa:9a:c4:47:c4:c0:f2:
                    3a:75:24:20:b1:f1:25:e1:1d:bf:01:6f:e1:f1:d7:
                    6f:a2:af:fd:c2:8b:6c:92:6a:8b:1a:32:8c:89:31:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:03:4E:7E:49:BB:C4:36:79:1F:A9:9F:E4:E4:BC:B5:97:86:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0db3b69-4779-3473-906f-70622f90a421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.126.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:47:1e:00:6d:72:88:3e:80:2e:a5:e6:9d:20:72:95:58:10:
         95:c2:5a:a8:9a:51:66:1d:7d:0c:7d:d9:c8:ff:be:72:e6:20:
         3b:35:f9:99:6f:53:44:dc:bf:df:21:21:8c:28:47:93:e1:32:
         22:86:14:56:54:3c:4b:69:02:14:26:50:3c:27:54:a4:15:e5:
         3d:ab:de:9c:0c:f3:f0:96:b7:da:1c:0f:06:d8:07:fc:17:4e:
         14:30:18:47:77:0a:60:d6:ef:9c:d2:ad:f1:cd:b5:b9:ab:4b:
         5e:dd:93:1a:03:1c:5d:bd:22:00:06:c7:b9:f7:ce:15:e2:80:
         b4:a5:f6:0a:6a:f6:66:72:cc:4b:3a:5c:e4:97:d6:ae:b5:c7:
         fd:8a:cf:0b:ef:39:a2:92:62:63:70:5b:54:38:12:de:02:9c:
         32:24:fa:f3:7a:3e:11:02:b5:0f:25:f9:84:44:04:36:81:14:
         63:ea:99:07:a9:0e:2f:fa:a3:6d:dc:fc:7a:08:9e:8d:5a:f7:
         d1:eb:c2:bf:72:7b:2a:6c:73:13:33:38:25:1c:50:7c:89:6d:
         69:73:ea:98:b4:5b:0e:b8:c6:e7:a6:b0:e4:d5:4a:ae:37:b9:
         0b:69:36:ac:de:3b:be:06:88:23:a9:cd:e9:21:a5:18:17:ad:
         cc:d8:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:19 2024 by rpki-client on console-fra.rpki-client.org