Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e693aae1-0cd2-31d1-a41a-437ec5575176.roa
File:                     e693aae1-0cd2-31d1-a41a-437ec5575176.roa (raw, json)
Hash identifier:          gsWeNK6nI2oAO6ONUNelBa06q526Jjc5E/pXjX4qMx8=
Subject key identifier:   96:41:7B:07:7F:93:C2:73:C6:63:B0:9C:3A:11:2E:2D:4A:F3:AE:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5E799F8122BF1E0D79840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e693aae1-0cd2-31d1-a41a-437ec5575176.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.137.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:e7:99:f8:12:2b:f1:e0:d7:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=f7e4b532-6e67-40ee-826a-e0b10035987b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:49:ca:74:12:d6:45:b3:fc:22:2a:39:1e:
                    3b:f3:4a:21:f5:27:65:9e:0d:3a:64:c2:8a:50:b4:
                    a6:fb:fb:4f:25:02:3d:72:0f:5c:f4:e9:fd:61:4d:
                    a8:82:4e:4f:04:48:18:3c:b1:c7:f1:1e:f9:3d:af:
                    23:53:85:36:f3:4e:04:ef:70:98:dd:b6:83:ff:07:
                    d3:2d:21:3c:61:b0:d3:ee:9e:79:11:e7:ad:4f:fd:
                    b1:6b:fd:7f:e5:d1:0a:e7:49:07:de:18:6a:6d:67:
                    18:b8:a1:18:38:2f:f1:f1:51:f4:15:84:fa:3e:63:
                    31:1e:ac:80:3d:93:7c:4d:bd:d9:44:9d:60:95:6c:
                    68:44:c7:d2:19:ac:c9:05:0d:81:af:cd:04:38:93:
                    4a:0e:a0:0c:0b:90:61:3c:37:9e:dd:b1:c9:4e:0f:
                    0e:8f:56:17:90:51:c0:b8:58:9c:4d:0f:60:3b:a0:
                    eb:0d:8a:40:dc:7a:74:c5:47:05:c9:6d:22:4b:94:
                    82:a0:5f:6c:42:2a:d1:c0:9a:3d:10:9c:c8:e1:80:
                    31:4a:fe:73:00:24:9d:dc:98:68:5a:f0:f5:72:c7:
                    fe:8f:02:da:7f:0b:36:ad:58:01:7c:bc:0f:e0:1b:
                    93:0c:be:0a:c0:07:ed:50:2e:85:6b:0f:18:65:ab:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:7B:07:7F:93:C2:73:C6:63:B0:9C:3A:11:2E:2D:4A:F3:AE:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e693aae1-0cd2-31d1-a41a-437ec5575176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:ca:55:5c:72:8e:0b:61:43:ed:f2:27:42:55:fe:e3:87:
         38:bf:dd:22:77:5b:41:b3:fc:6f:d9:5a:c4:c0:3a:50:8f:1d:
         99:b9:4a:6d:0c:29:13:f4:ba:be:c8:82:d3:db:d1:19:f3:2f:
         dc:50:5d:db:fa:83:d6:51:87:a8:c4:e5:bf:48:95:80:90:51:
         16:18:26:b8:a9:09:c8:96:01:df:f8:6c:3a:3f:37:ee:96:46:
         37:d2:1c:e3:c9:1e:07:6b:cd:1d:f1:e0:e6:7f:94:14:fc:fc:
         8d:0a:e1:15:90:04:02:39:7f:9b:f8:54:b3:31:70:a0:70:aa:
         d8:83:e4:4f:6d:90:a8:9b:03:9c:40:5b:e3:31:d6:1c:ee:a0:
         68:d6:7e:d7:fa:4f:b9:06:07:cf:e1:27:bd:79:50:56:0e:f0:
         d2:22:48:45:3f:f1:3c:7e:7e:f0:0c:3a:59:f0:9d:0f:84:01:
         0a:15:fa:09:42:b8:04:1b:38:ff:37:94:39:e0:07:3b:15:87:
         21:ff:39:d4:b3:4e:6f:63:95:12:b7:5f:f1:b5:0c:82:6d:d2:
         e4:d8:51:54:36:3a:a1:0d:b1:65:ce:a1:c3:78:12:87:bb:87:
         28:e2:9a:46:a6:4a:32:46:69:4a:b1:89:03:ab:5a:53:b0:e3:
         45:0e:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:22:25 2024 by rpki-client on console-ams.rpki-client.org