Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d979a1d9-2551-30b5-b3b2-91920a0bdae9.roa
File:                     d979a1d9-2551-30b5-b3b2-91920a0bdae9.roa (raw, json)
Hash identifier:          3p0sLV7BaF+9jEvE5SKPPOcY5dxT1vQ8nr1fyIBMLKM=
Subject key identifier:   F6:5F:EA:E2:75:9A:1B:95:95:EF:85:14:0C:2B:6D:C7:A0:85:6B:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB7EC942ABC1301B0D7A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d979a1d9-2551-30b5-b3b2-91920a0bdae9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33490
IP address blocks:        73.11.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:7e:c9:42:ab:c1:30:1b:0d:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=874665a0-4c47-4357-95c6-9c46d48fcd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:28:55:44:74:3e:cc:f9:ea:ce:b2:67:9f:
                    bf:86:4b:c3:89:f6:d4:60:1b:67:65:f5:12:03:e0:
                    4d:f3:e1:b2:0c:36:ea:d8:c0:f6:95:64:58:22:64:
                    ee:70:d7:1a:df:5d:7a:b9:68:e3:30:ae:37:c6:6b:
                    cb:1d:ee:26:5c:f0:48:e2:8d:aa:07:59:99:fd:f1:
                    0e:46:0e:00:53:3c:70:f0:83:ad:54:48:62:49:af:
                    75:4c:1d:13:d5:cc:9c:8c:d5:3a:7b:a0:ba:5f:42:
                    20:fe:37:60:c0:6e:39:06:c0:f9:ca:eb:d8:e3:94:
                    b8:78:66:c4:99:e3:b2:63:32:e6:e6:2f:60:22:a1:
                    41:6c:66:45:6b:77:20:a8:04:5e:c6:f5:6e:13:a8:
                    6d:b5:e7:88:4d:d3:e5:c0:ef:ef:9d:36:05:a8:4a:
                    b1:b2:b4:d6:8e:4d:46:fa:fa:ee:fe:f9:86:e4:47:
                    f2:ea:6c:35:c9:da:cf:1f:b6:72:33:f1:72:1b:ad:
                    7f:1b:4e:46:57:ca:10:f9:e9:0b:43:21:c7:62:a5:
                    6d:e4:dc:33:d7:c9:5c:35:39:d1:87:84:00:f3:b3:
                    29:fe:77:1b:47:54:a8:20:b7:35:29:a5:ce:bb:d3:
                    63:db:77:c9:cb:de:37:b8:ba:0d:6b:c4:7c:e1:05:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:EA:E2:75:9A:1B:95:95:EF:85:14:0C:2B:6D:C7:A0:85:6B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d979a1d9-2551-30b5-b3b2-91920a0bdae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.11.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2a:9b:2f:eb:ea:7e:d4:f1:48:fa:87:36:12:d3:33:b8:9e:
         24:6d:37:60:e0:31:e4:19:7e:c1:37:16:51:bd:bd:18:08:6b:
         ba:65:3d:fd:59:ce:6c:43:c1:bc:8b:e2:d5:d2:af:3c:21:9c:
         97:8e:fc:ac:56:62:c7:e8:e9:73:e0:de:4e:68:32:44:2f:45:
         e6:d9:8f:75:97:96:c6:37:e4:bf:70:af:a5:e9:b7:6d:3a:d2:
         9e:97:09:47:7e:6a:61:c6:d1:7a:c1:7b:e1:eb:15:d6:18:41:
         68:b6:36:d4:dc:2a:92:c2:6f:66:e5:10:8e:19:45:ba:9c:b2:
         e0:1b:7c:97:71:61:a0:df:89:e7:da:cb:31:60:f7:51:03:94:
         7b:4e:6b:42:76:5b:4c:55:db:d9:03:58:ce:24:74:ea:a1:97:
         ea:6e:5a:8e:c7:43:df:bf:2e:98:c9:bc:89:ec:01:c5:48:ad:
         6e:be:47:cc:64:ee:be:38:19:85:c1:aa:5c:9e:7b:56:57:c0:
         91:f9:73:04:eb:9f:48:20:7c:83:bc:58:1c:a4:6b:48:fa:7c:
         84:70:e4:9b:c9:b2:2d:bb:ae:d2:81:c5:c8:98:35:23:11:30:
         cb:ee:96:fe:f3:03:5a:a5:a9:fc:60:05:e7:74:6d:4e:b6:d3:
         9f:78:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:49 2024 by rpki-client on console-ams.rpki-client.org