Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e314aaa4-f550-30fd-b81b-142f2a83fb3c.roa
File:                     e314aaa4-f550-30fd-b81b-142f2a83fb3c.roa (raw, json)
Hash identifier:          q1XCXLXShru6lYF7kXpDw8H6INLJ5Q+YetFZjUOYnPo=
Subject key identifier:   0E:D7:3B:E9:10:F9:1F:F8:5E:D9:0F:29:73:DD:E7:5E:49:E4:7F:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C37B5436BE9B7EFE28E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e314aaa4-f550-30fd-b81b-142f2a83fb3c.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.211.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:37:b5:43:6b:e9:b7:ef:e2:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=77f6ef05-4b05-4a9b-a10d-0dd23494d3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:04:07:c1:5c:9f:49:e2:26:2f:d5:7a:b8:
                    3d:2d:b7:1d:a3:57:0e:ac:51:f8:6d:6c:08:be:19:
                    56:8b:f4:fd:c0:d1:cb:3d:f3:ba:d5:b3:17:8b:57:
                    9b:3b:32:fa:96:5b:f0:77:bb:50:7e:c3:15:56:16:
                    d4:55:2b:26:13:17:62:0b:1a:d0:ce:89:27:16:61:
                    82:60:98:de:6c:67:6c:b6:76:6e:0f:35:87:21:09:
                    9b:8e:fc:0b:22:bc:3f:bb:d8:0c:2d:15:3f:86:4f:
                    bd:b7:78:b3:15:85:ff:8f:eb:98:a4:b7:05:3f:53:
                    39:69:2f:c6:74:7f:1f:b2:d9:f0:43:97:71:9b:91:
                    08:7a:4e:8d:db:1d:37:93:96:2f:7f:24:e5:67:8b:
                    20:27:29:8e:78:99:13:97:87:40:0b:46:be:27:fd:
                    40:6a:aa:5c:ca:b4:9e:9e:c8:69:6f:da:d9:66:5e:
                    93:d6:65:0f:f4:8e:3d:a0:cc:41:a3:e1:3d:81:27:
                    c3:4e:f0:55:af:7c:da:14:66:7a:d3:c2:10:8e:07:
                    4a:6f:0b:ec:cc:cd:f1:24:79:07:d5:70:05:c8:ad:
                    fe:94:22:8b:52:4c:64:5d:07:ce:80:da:27:f2:81:
                    89:41:ea:06:ba:c5:5a:1b:01:82:bb:9e:72:af:ea:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:3B:E9:10:F9:1F:F8:5E:D9:0F:29:73:DD:E7:5E:49:E4:7F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e314aaa4-f550-30fd-b81b-142f2a83fb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:31:fe:16:ee:eb:7f:84:8b:1f:d0:f6:19:eb:6b:43:7e:4e:
         f2:96:f0:df:ac:f0:51:0c:bb:d9:e1:86:70:7c:c5:c5:d6:c8:
         fa:85:55:2a:b8:ac:2b:ea:6c:7f:7e:2f:2c:a5:cc:94:2f:d3:
         5d:8b:c2:a9:82:40:99:d6:9b:fa:c9:5e:28:03:df:0c:1e:a3:
         e5:20:98:01:c3:ad:52:68:36:08:fd:69:d7:21:0b:c8:6f:52:
         58:b8:24:5b:13:59:30:ae:dc:06:d2:57:0d:15:38:b1:ef:a6:
         76:34:54:73:ec:a2:0a:fd:66:43:6e:11:13:26:93:0a:b3:e5:
         e5:76:93:97:11:66:16:6d:0c:ac:87:18:f5:02:9c:3b:d8:4e:
         80:5a:91:8a:6e:08:c2:b9:db:70:fe:e1:3b:09:ae:8f:32:a4:
         9a:85:24:e3:b5:9e:b2:7b:8e:29:42:7b:bd:55:75:e1:40:df:
         b3:ac:2d:83:0f:a8:e6:0d:07:f9:ae:77:ba:e2:a7:d4:f7:ee:
         ef:20:c0:52:6c:45:ba:d0:3b:6d:37:69:a0:b2:df:55:ab:3d:
         ac:23:b3:a9:fd:25:7c:7c:7f:1e:3d:1e:8d:33:24:10:49:50:
         42:57:d9:58:d7:ac:9e:dd:12:c4:0a:ee:0a:0c:5c:50:73:da:
         1c:d2:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:36:00 2024 by rpki-client on console-fra.rpki-client.org