Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df7c46d9-5182-3a67-b475-e4db00d0660d.roa
File:                     df7c46d9-5182-3a67-b475-e4db00d0660d.roa (raw, json)
Hash identifier:          iSPgVyPpfp9mEtzKBWKuej9z2kS9vt4YBrSYF26Q6+M=
Subject key identifier:   F4:6F:8C:F6:28:4C:49:95:5D:B3:4C:83:92:37:93:5F:92:8A:CF:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8923808836FB0082A2994E
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df7c46d9-5182-3a67-b475-e4db00d0660d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.199.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:23:80:88:36:fb:00:82:a2:99:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=897c82e0-aa25-426f-b4ea-7cc9706bf440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:ac:05:9e:e5:5d:e9:c9:ee:f3:06:a4:14:
                    f7:c9:80:6e:27:ab:3d:87:64:1f:d3:83:89:56:22:
                    65:18:f8:d8:a9:c5:54:6c:b3:34:3d:34:a7:ab:0d:
                    70:f5:d7:31:f8:32:e5:24:0f:f1:ac:7f:f6:29:e9:
                    01:e4:b3:c6:c1:f6:f5:ff:c5:fe:e3:70:fd:da:0d:
                    63:49:27:52:fd:8c:2a:7e:c8:0c:b4:94:21:0d:77:
                    03:ba:b8:21:28:a0:8d:15:fc:1d:0c:c6:fa:bf:a1:
                    ab:25:25:7e:58:aa:38:ce:af:c5:07:e6:5f:3d:b4:
                    8d:bc:80:ae:1a:7b:45:47:ce:2b:9b:60:dd:54:30:
                    e4:42:86:a0:0c:a8:cb:e4:51:f6:de:f9:d0:1d:ae:
                    96:87:43:81:d2:62:d9:6a:5a:2a:6f:04:60:ae:aa:
                    8d:d4:a8:0c:c3:51:ff:14:66:5b:90:e1:9d:61:09:
                    a4:a7:41:bc:c5:5d:49:be:f6:0f:df:7a:97:25:2b:
                    cc:e4:29:40:31:01:76:6a:58:b2:33:54:76:f4:2c:
                    95:bb:f2:b2:f4:64:55:8b:b8:2e:1c:e6:57:86:70:
                    2a:b3:bd:fe:83:b1:d4:75:46:e5:25:6c:ec:7b:5b:
                    21:04:fe:11:14:8a:37:2a:59:c3:3e:46:ab:ba:46:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:8C:F6:28:4C:49:95:5D:B3:4C:83:92:37:93:5F:92:8A:CF:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df7c46d9-5182-3a67-b475-e4db00d0660d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:dc:77:6d:37:e5:44:03:80:b7:af:e7:21:13:7d:24:45:d7:
         e8:58:50:3d:01:5b:ca:36:ad:68:aa:90:ba:5b:75:9b:e1:4c:
         b4:af:ba:0f:65:d6:6a:e7:f2:4c:88:93:0d:67:3e:c8:30:fb:
         1e:1d:f2:2b:bd:f9:08:24:31:6a:d7:ef:fd:10:ce:dc:78:05:
         34:54:f5:de:85:b5:09:0c:69:89:ce:97:11:42:8c:d2:c9:ab:
         c7:ac:a4:65:d7:f3:c9:00:23:f9:61:cc:ae:bc:29:04:7b:77:
         d3:ab:8a:e1:04:56:63:6d:30:96:06:c5:17:9d:b3:0d:de:e7:
         64:39:6a:77:e8:b4:e2:9e:58:d5:e3:ed:c2:1c:c8:1e:62:0b:
         61:be:f9:62:7d:fc:b2:52:3a:6e:26:6f:11:4e:b9:88:23:31:
         c2:f7:0c:b4:e8:ca:bf:95:c9:11:59:02:fe:82:7c:1d:cd:bd:
         ef:c9:8e:e0:31:0c:23:c5:ca:94:16:4c:98:df:0b:8a:82:02:
         4b:bf:d7:b7:f2:20:8d:80:1a:57:45:12:92:7d:03:18:ab:27:
         c8:e0:7b:43:aa:36:6c:38:00:91:d7:35:da:59:68:c1:98:d7:
         12:cd:5f:7b:a7:13:b3:00:6d:ff:64:17:66:4f:46:49:db:f9:
         13:bc:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:33 2024 by rpki-client on console-fra.rpki-client.org