Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7d90044-036f-349f-bf9f-0003d4529935.roa
File:                     e7d90044-036f-349f-bf9f-0003d4529935.roa (raw, json)
Hash identifier:          LPWa5AoWi9sA69HolNqZna/X4JMLB2ZFvD/2K1MVWb8=
Subject key identifier:   6F:10:85:24:AE:05:43:D1:FA:77:48:CE:ED:C7:90:60:53:90:3A:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C6823A626A6B53CEA7040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7d90044-036f-349f-bf9f-0003d4529935.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.72.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:68:23:a6:26:a6:b5:3c:ea:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=5e08aa5a-aea3-48f2-a10b-5b5d7fad7d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:d2:ce:f2:0a:26:f2:88:62:f6:de:fd:09:
                    fb:62:8a:0e:07:88:d7:26:54:3c:bb:65:1d:b0:3e:
                    62:bd:c1:a7:9c:de:72:da:27:2b:43:62:a4:a3:3b:
                    b5:9e:e3:1c:6e:b3:f4:49:af:e2:33:3d:1c:c4:05:
                    d6:ae:34:38:67:9a:15:f3:5c:14:53:03:fb:fe:a7:
                    b1:ee:1b:fe:aa:99:c6:84:28:d5:ec:ca:c1:cb:4e:
                    7d:b5:5d:c3:0f:9d:8b:f4:2d:c6:29:60:e7:14:ba:
                    93:bf:d3:88:47:aa:d8:d4:5a:7f:9e:12:fa:f7:45:
                    44:3a:1e:e5:21:0e:9f:44:1a:06:21:d7:b1:fc:e8:
                    a3:b3:5f:1b:12:61:2d:c5:92:ec:bb:f8:a3:1c:05:
                    fb:36:80:6f:e5:ee:bd:5b:c4:0b:37:eb:2f:8d:18:
                    54:e3:b8:8c:0f:09:94:63:8f:80:ab:95:52:7e:35:
                    0e:e2:52:00:2b:05:d0:36:81:4f:27:00:49:0a:27:
                    84:09:9d:6a:01:9e:84:c2:d5:31:84:0a:27:54:9a:
                    29:84:ca:74:30:16:07:ba:6e:da:3e:f6:ec:90:d4:
                    08:83:3d:5b:01:4e:e3:5a:79:8e:b7:04:d6:5d:be:
                    76:f9:ca:d0:be:e4:fb:51:a5:f5:0a:71:47:43:29:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:10:85:24:AE:05:43:D1:FA:77:48:CE:ED:C7:90:60:53:90:3A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7d90044-036f-349f-bf9f-0003d4529935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.72.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e0:70:28:da:00:96:e6:71:37:b3:c6:2c:b5:6f:b6:cd:f9:
         1d:1e:fc:00:37:b8:d6:5c:6a:ff:d2:92:27:63:53:ba:83:44:
         62:00:3b:6d:4e:88:0b:48:a0:08:ff:d7:ae:ec:b1:49:81:95:
         da:78:34:59:c8:57:0f:e9:19:c5:80:6a:85:a5:e3:1e:78:b4:
         8c:d6:72:02:09:26:71:c9:3b:7f:85:ef:65:13:4f:12:8a:75:
         e0:1d:ce:33:e9:3e:b2:f8:6c:77:0d:b7:7e:86:95:d8:c2:40:
         6a:c2:c8:12:53:6c:ca:98:78:b6:ba:7a:87:30:43:8a:b8:65:
         c0:21:d9:a4:f1:53:e8:25:01:ae:a6:0e:4e:82:9c:1f:5e:41:
         0b:a3:31:09:2f:35:02:ff:0f:84:15:b6:fb:7c:47:aa:96:5a:
         b0:bf:de:17:ca:19:b3:99:a6:7c:e6:47:7f:1c:62:66:f7:a0:
         ca:91:84:8b:60:25:bb:21:13:01:29:a4:c1:23:08:9e:ad:09:
         61:1b:cd:6c:a4:98:94:31:4b:c2:82:d8:8f:79:b8:ab:7d:90:
         10:6b:a3:fe:19:71:d3:1f:bb:dd:ee:b9:54:07:7d:67:94:b9:
         c4:87:9a:fc:4a:0c:28:11:d6:dd:dc:41:39:91:8e:30:10:6c:
         49:53:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:36:35 2024 by rpki-client on console-fra.rpki-client.org