Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e323f0fc-5321-3909-af34-c5a1dcaa7980.roa
File:                     e323f0fc-5321-3909-af34-c5a1dcaa7980.roa (raw, json)
Hash identifier:          ztnA+L2AFal8KcNnldcnb3VZmJTdRvHAW+JdnuSHuF4=
Subject key identifier:   4D:08:CF:F0:B4:96:CE:C1:88:F4:E4:DF:B5:B8:1E:8C:68:E1:3A:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EC74A5262BDB377596580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e323f0fc-5321-3909-af34-c5a1dcaa7980.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        73.81.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:c7:4a:52:62:bd:b3:77:59:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=5730d38a-92a1-49d5-9b73-a9686db936bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c6:6d:39:51:7f:c8:7d:b2:d9:0c:86:0a:83:
                    f0:49:66:c5:49:5b:60:54:ae:66:60:8e:94:fa:d3:
                    0a:48:77:99:99:64:0a:16:a2:98:b0:3d:be:ba:33:
                    24:1a:a6:00:d1:87:cf:04:40:9b:93:9f:dd:9b:7c:
                    fc:94:98:64:88:15:05:a9:65:1f:a9:a5:21:28:77:
                    57:25:10:cf:ca:f1:12:80:ec:78:0c:fa:48:a1:0f:
                    57:fb:a1:1f:13:36:cb:b1:f0:a7:66:d8:af:e0:6d:
                    68:68:7d:27:6d:18:94:ed:f8:f3:86:96:1f:95:7f:
                    ff:a2:75:de:c9:70:b9:c6:08:5d:48:38:da:94:fa:
                    07:49:ee:eb:cb:8f:3b:78:5b:3b:9b:f7:5f:e1:c6:
                    51:22:80:49:77:da:89:a3:8e:0a:fb:99:d9:69:1c:
                    09:91:a8:5d:2a:71:b3:68:43:8f:81:7a:c8:d1:41:
                    78:ec:4c:b1:97:dd:af:e9:f3:b9:14:11:55:46:c4:
                    de:20:35:e1:aa:86:b1:ba:85:e3:46:35:03:6a:f0:
                    08:fd:e6:d9:4e:ea:13:3e:1e:11:61:cf:cb:1c:a8:
                    86:15:14:3e:37:8d:ed:8d:ea:07:da:6a:0f:99:a2:
                    84:87:b7:1a:06:01:e5:8b:c3:da:91:bb:7c:e8:56:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:08:CF:F0:B4:96:CE:C1:88:F4:E4:DF:B5:B8:1E:8C:68:E1:3A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e323f0fc-5321-3909-af34-c5a1dcaa7980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:65:d6:da:64:8e:b8:36:10:c0:b3:1a:b5:99:a8:e1:9d:
         0f:fe:a9:bf:6f:3b:d6:c8:35:5a:47:36:75:71:d5:23:2a:d3:
         1b:d7:b6:5d:07:56:3f:f4:b6:04:48:54:8f:2c:d5:7d:3c:a0:
         c5:9e:08:85:a5:ee:73:49:dc:15:05:2d:32:97:0b:98:a1:3b:
         29:0e:64:7c:09:28:d1:7c:a1:07:d5:24:b3:74:a7:78:58:b6:
         b2:52:02:68:fb:be:d4:06:45:a1:ee:67:45:7e:8a:45:8c:f3:
         d4:cf:f5:5b:23:bc:c4:11:c6:72:d1:66:0e:de:18:66:6d:f6:
         52:c5:31:62:b7:f6:3c:e6:5f:38:e2:d3:03:fc:b0:88:bd:fc:
         de:ea:86:5d:98:cd:00:5f:42:13:fc:39:c6:66:cf:42:d3:6f:
         d2:75:84:a3:fe:17:16:36:1a:fa:6d:f4:ca:08:63:b8:1d:e2:
         58:b4:d1:9d:1a:66:4c:08:17:9d:5f:1c:f0:69:07:db:c9:cd:
         fe:f2:85:ee:67:87:89:0b:b1:84:a9:9d:89:a9:ac:85:2a:de:
         3c:45:af:e3:fa:0d:f4:b3:b2:b3:cf:4f:14:62:39:02:5c:4a:
         d6:46:29:f2:75:cc:b4:25:1f:c9:39:5b:c8:06:e0:87:45:ab:
         af:24:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:02 2024 by rpki-client on console-ams.rpki-client.org