Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa
File:                     d12b48af-2341-3795-a912-e5a8a93eb32b.roa (raw, json)
Hash identifier:          wBxmu/96F9/KySLgNALdFsTGpUOK3AT1TSWAsLzLfis=
Subject key identifier:   9F:7E:0E:BD:B0:09:67:35:A7:6D:52:C1:7B:5E:DF:11:5A:40:91:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E07A2ED4A2E9ECD4AAEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.199.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:07:a2:ed:4a:2e:9e:cd:4a:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=78f3c67c-619a-4321-b4e4-999fdc1fd75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:5b:4d:f9:cc:a4:8f:9a:d6:b0:87:67:d2:
                    23:b1:25:67:f9:a0:88:f2:25:d8:ac:1f:d6:dd:48:
                    4d:c0:c5:1b:bf:ec:c5:34:c0:f3:67:dd:97:44:a5:
                    70:bf:c8:51:be:7f:47:5d:d0:f5:63:5a:80:5e:be:
                    18:5f:bf:89:a2:ea:47:67:60:5a:1d:86:20:61:ce:
                    ef:99:b4:7f:7a:63:ea:75:1c:14:a2:da:00:9d:4e:
                    b8:09:14:7b:a2:de:f3:de:6c:bf:3c:99:19:5d:2f:
                    c0:db:4c:b9:22:d6:37:20:17:db:23:ec:40:83:38:
                    c7:32:fb:81:16:57:20:3a:9d:90:0e:14:17:d6:d1:
                    4a:13:c5:be:80:e1:82:ef:c3:e6:40:fc:0d:52:ab:
                    b7:76:24:c8:46:11:67:33:db:8a:60:f7:c9:8c:c7:
                    7f:45:47:10:d5:dc:ef:b5:a6:36:d2:4d:f5:42:a9:
                    ae:27:08:ba:57:c8:aa:af:28:5f:19:4d:69:bc:78:
                    5d:86:2e:98:b3:d1:a8:07:e2:79:ff:53:b0:db:13:
                    9b:c0:21:b4:20:68:eb:bb:38:c5:a5:d5:bd:a3:a3:
                    c5:6d:74:a6:44:d9:09:26:52:bd:ec:46:d7:e2:72:
                    93:a9:3b:da:ac:5d:ef:8b:ed:37:c5:13:d9:75:83:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7E:0E:BD:B0:09:67:35:A7:6D:52:C1:7B:5E:DF:11:5A:40:91:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:80:07:a4:23:1c:f3:f0:81:44:6a:57:07:b4:9c:99:ad:66:
         e5:4a:34:e2:29:a9:fe:a2:2d:13:d8:42:0b:42:11:ff:2d:5b:
         8c:f0:9a:15:fe:3c:af:6a:c6:58:4a:c7:d9:49:ed:e8:1c:73:
         86:6d:d8:76:c9:ef:37:d2:69:f8:ee:e2:58:2d:c9:e1:d2:d5:
         de:00:49:4d:dd:38:5a:34:bb:94:02:6c:95:09:8e:00:04:d1:
         5b:64:33:48:e4:d5:6a:ef:fe:51:24:1f:e7:a4:72:12:a2:31:
         4d:01:77:f6:dc:fe:a2:5a:e9:c4:71:11:84:d2:54:22:aa:e1:
         94:56:33:cc:00:5f:1e:84:a4:5d:3e:2b:d9:60:77:e1:be:d3:
         f7:4d:ae:30:6c:d0:2f:c9:3d:86:14:ef:ae:ac:f2:ce:3d:18:
         99:9d:2a:fd:85:cc:f6:15:88:4a:9e:ba:be:a3:8b:29:8c:73:
         36:86:ce:05:48:6c:53:19:14:aa:2e:7c:a7:63:ef:13:2e:65:
         5e:b2:35:a0:40:c2:f6:4c:aa:c1:10:36:7a:91:6f:7b:cb:ba:
         f2:d8:ab:74:11:48:2d:7d:f4:28:08:84:96:46:01:e6:0d:a8:
         32:53:d8:19:69:65:98:04:ea:c9:95:21:5f:8d:22:c4:4b:32:
         10:40:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:57 2024 by rpki-client on console-fra.rpki-client.org