Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9d616cf-fa1f-3c29-8780-47a9b5c8ade3.roa
File:                     d9d616cf-fa1f-3c29-8780-47a9b5c8ade3.roa (raw, json)
Hash identifier:          ebhrafIUh+gkGqOyd60p0jpQYxQgH4gzer1ZGyConQA=
Subject key identifier:   0C:3F:8F:49:24:D0:95:A6:D6:35:33:08:9F:30:2F:EB:6F:AC:8F:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DF4DB0A10ACA17942FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9d616cf-fa1f-3c29-8780-47a9b5c8ade3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.160.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:f4:db:0a:10:ac:a1:79:42:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=58e49ff7-6253-4243-817f-318aebb0458d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:b6:c2:cb:24:51:46:87:b7:57:a7:c7:93:
                    f8:33:a0:07:d6:a0:6f:32:6f:fb:40:12:56:d9:be:
                    79:8b:fe:e7:39:01:69:40:51:5e:d9:16:69:6f:1f:
                    7b:4f:66:e1:f6:d5:b0:05:0f:57:37:d8:c0:4b:4a:
                    cb:3e:15:49:d8:4c:24:d0:ab:08:e0:2c:ba:54:43:
                    11:c2:11:81:f3:95:27:9f:be:28:31:7d:18:30:bb:
                    02:9b:9a:c4:50:db:37:81:25:0c:86:a5:60:07:44:
                    7c:35:bd:d2:0b:5f:db:21:fe:21:f4:5b:d5:7b:24:
                    cf:98:27:95:f8:ac:63:c3:4d:fd:36:6c:d9:7d:a9:
                    41:d0:34:64:10:0a:ee:fb:00:86:96:95:69:d7:eb:
                    07:43:41:22:dc:62:ea:5e:9b:00:c3:00:da:d0:61:
                    c6:d4:42:b1:6f:8f:05:ae:04:51:ef:46:ec:8a:77:
                    8f:87:ab:7d:24:64:6d:6c:ef:72:84:28:9d:61:d8:
                    f9:d0:4c:68:e0:54:be:17:c6:f9:f0:de:3a:6c:08:
                    1a:3f:48:5c:a4:94:e1:47:e7:03:27:a1:6c:da:92:
                    30:97:5d:90:63:c9:cc:ce:03:15:33:37:7a:ca:69:
                    4a:ba:f7:40:69:38:3a:32:c0:b0:ad:b9:19:8e:8c:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3F:8F:49:24:D0:95:A6:D6:35:33:08:9F:30:2F:EB:6F:AC:8F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9d616cf-fa1f-3c29-8780-47a9b5c8ade3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:0a:0a:6d:42:28:5a:1a:8e:8b:7b:25:85:59:a6:32:02:
         b4:a1:8a:67:9a:9d:80:cc:77:bc:6a:35:2a:78:21:a2:8e:36:
         38:77:a0:c7:9a:96:78:f0:c9:14:41:80:a2:de:3c:66:58:74:
         b8:b0:04:c2:c8:f3:dd:0b:6c:76:4f:da:42:a3:42:77:da:dd:
         6c:8a:f8:b4:46:6f:29:e6:27:dd:d5:0a:a5:f5:ee:73:60:18:
         05:26:75:43:39:e0:a7:40:33:bd:00:3d:80:be:a5:80:a0:9c:
         16:8b:f8:83:a2:4c:07:2f:24:3b:71:11:28:e1:88:a4:c1:f2:
         49:6d:f4:a4:51:bd:9f:80:30:19:f3:8e:59:0a:e8:a3:bb:1f:
         b9:f1:e9:10:36:7b:bb:fb:cb:ec:88:88:c1:a3:83:df:d8:2a:
         87:06:ae:53:84:bd:29:34:fc:5d:46:7e:74:7d:65:d0:c6:a8:
         4a:ad:68:e5:14:c1:57:cd:2c:de:89:6d:04:ca:d7:6f:f4:74:
         9d:f6:e1:30:ea:f2:3d:63:29:dc:31:36:7b:9f:5b:16:68:55:
         14:ee:e6:9b:de:4d:a1:1b:bf:12:82:2a:81:5a:84:74:a2:a5:
         46:43:8e:1f:4e:b0:03:3a:f9:b3:01:36:69:52:03:0a:3d:d2:
         d8:f4:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:36:03 2024 by rpki-client on console-fra.rpki-client.org