Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa
File:                     d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa (raw, json)
Hash identifier:          WVVTKrmk7sg1QfmnX97hpQSjwpDmfJMSTkM6xd7fGKQ=
Subject key identifier:   9E:3F:5E:AC:91:08:D8:FD:D0:57:F8:AE:D4:77:3E:67:E0:18:6A:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C10CA8707275614710D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.146.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:10:ca:87:07:27:56:14:71:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=a25c53a6-900c-4386-8b96-204b86083a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:6c:24:bc:14:fd:41:03:08:64:c1:0a:6a:
                    49:68:14:2a:40:3d:71:7a:46:a9:ea:0f:8b:ab:e4:
                    11:23:99:13:74:60:98:e8:e9:5f:9d:65:8a:75:bc:
                    b0:c5:ea:e5:9d:aa:74:60:66:f4:20:9a:cf:e9:49:
                    a7:0b:f8:ce:5d:73:dd:d7:77:7b:db:a0:47:a7:6f:
                    79:b6:d0:7d:e5:82:db:a7:48:68:2b:ef:96:71:33:
                    16:3b:20:71:a0:c7:95:16:91:3e:e5:7a:4c:66:98:
                    b3:74:1e:0c:76:5d:2d:45:8c:fd:9a:58:db:44:57:
                    7b:b6:72:58:d9:5f:99:ec:85:a5:0b:1f:b0:88:99:
                    08:48:94:40:62:d5:f1:c6:d4:a7:fd:f1:35:9f:fd:
                    b2:24:ff:31:ec:f3:0a:20:74:ab:6b:49:37:7f:31:
                    2a:31:15:c2:b2:c2:95:41:4f:fb:4d:13:1e:e8:e4:
                    d2:25:57:cb:76:d7:7b:17:32:d6:b9:1d:ca:b1:db:
                    1b:ca:e4:2f:ca:ed:9d:b5:fd:55:44:f7:f6:c3:34:
                    cf:82:75:2c:44:b4:f6:c8:60:49:af:15:c5:b5:95:
                    92:28:b1:51:64:dc:d8:38:73:b0:b3:d5:47:61:c5:
                    e7:6a:a1:9c:f7:03:2c:ce:eb:d6:ad:5b:c5:6a:f7:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:5E:AC:91:08:D8:FD:D0:57:F8:AE:D4:77:3E:67:E0:18:6A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7b:8f:4b:1b:2c:21:89:a4:21:0a:a9:b5:18:30:45:dd:c7:
         02:44:2e:2e:99:52:8c:c9:67:7b:87:ed:9e:85:d2:f7:4b:4a:
         63:89:29:f5:bf:da:00:9e:23:69:30:1a:3c:bc:71:b5:66:b4:
         b2:26:f0:4c:bf:89:b2:e4:80:e0:91:39:00:d2:d3:18:a4:91:
         5c:7e:b9:9e:1c:2b:4f:4d:66:27:32:2f:f3:3b:9b:ae:73:90:
         ae:70:fb:d4:6b:af:64:45:cc:e9:da:85:f8:f9:80:70:cd:2b:
         3e:81:f1:b5:fa:fc:42:43:b0:38:9a:36:b3:8a:b1:cc:f9:bf:
         95:6e:74:0e:a9:d6:f7:f7:ce:d2:a6:02:ba:7f:15:59:be:3f:
         81:52:4e:19:d8:3a:2f:ff:88:a4:59:8b:8a:79:ea:f2:6a:fe:
         23:71:85:8c:c4:07:72:2d:73:78:c7:fa:aa:b8:8d:ee:c9:1a:
         14:5b:69:79:ce:16:23:16:c1:40:dd:48:7a:22:49:23:fb:d3:
         c2:f4:d5:4b:51:df:f3:83:51:0c:d3:02:ee:26:36:c0:66:38:
         43:a9:d9:dc:6b:34:cd:51:a3:60:45:80:ad:6d:c8:58:51:e5:
         f9:73:0b:0b:84:a0:7c:3a:27:e0:c8:18:aa:f1:b8:89:63:cc:
         23:84:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:34:21 2024 by rpki-client on console-fra.rpki-client.org