Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eeac29a1-cfd6-3bcc-80ea-1045ac90a63b.roa
File:                     eeac29a1-cfd6-3bcc-80ea-1045ac90a63b.roa (raw, json)
Hash identifier:          zX7Oaw0VPRAXR/jbRMU2qT1Oywnxk9SJbSKmy6k8tEM=
Subject key identifier:   99:0F:48:ED:22:6E:D4:D3:14:2A:FF:5A:BF:F3:34:4A:F8:94:0E:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7CCD1D499CA6A3AEA5E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eeac29a1-cfd6-3bcc-80ea-1045ac90a63b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.191.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:cc:d1:d4:99:ca:6a:3a:ea:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b3b037d4-b892-474d-a4c9-e564439028ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:f7:2d:60:16:fb:ef:42:58:04:64:a9:54:
                    60:70:78:d1:90:e1:d6:c7:e2:ca:bb:4f:75:3f:f3:
                    11:39:02:bc:da:b6:85:1c:48:69:03:7d:6f:4a:a7:
                    81:b9:6e:5b:43:2c:76:f4:2c:9f:08:59:56:c9:4b:
                    14:ec:51:5e:a8:14:a3:f2:8a:a6:f6:d4:36:7c:c5:
                    2a:ee:39:6e:51:50:32:fd:8a:6d:0d:7a:d3:f7:3a:
                    02:af:56:2d:e8:24:64:2c:56:8e:3f:65:6f:cb:0c:
                    95:33:c9:ec:3a:ea:c7:5a:08:8a:84:63:ae:00:ff:
                    92:1a:0b:0f:c9:a2:27:72:52:a5:d8:47:f9:25:48:
                    ad:5a:31:5f:62:15:1c:60:46:34:78:a3:f8:f5:f7:
                    96:6e:82:b9:24:2f:b8:fd:7c:7b:ab:73:9b:3e:de:
                    30:09:7c:62:e6:dd:d2:5a:2d:d1:7a:65:e4:8f:7d:
                    ac:45:b6:af:4d:cb:51:9a:19:72:f1:b7:14:5e:df:
                    ef:5f:12:34:10:b0:6f:38:ec:63:ef:cb:8d:5a:fc:
                    72:25:48:15:9a:ab:88:97:42:b7:a6:63:87:8a:51:
                    b2:88:53:47:ea:98:f8:59:e6:73:17:db:f1:bf:4e:
                    34:16:40:52:63:9f:41:5a:77:c4:af:3f:f9:2e:a1:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:48:ED:22:6E:D4:D3:14:2A:FF:5A:BF:F3:34:4A:F8:94:0E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eeac29a1-cfd6-3bcc-80ea-1045ac90a63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:68:d1:9a:7a:f7:e7:43:67:3e:fa:af:ed:52:8d:0c:57:
         c4:e6:0b:34:01:ca:6e:43:ec:71:02:23:2b:3d:db:c7:f4:85:
         7c:cf:d5:c3:4c:f7:53:ce:e0:c0:4a:2a:6a:2e:3e:27:3d:51:
         be:59:5c:2b:8d:9c:70:2e:09:17:17:71:87:fb:b0:77:be:7e:
         8f:64:ef:f1:d1:48:c4:5f:d8:09:16:7a:44:bd:dd:d4:a4:1d:
         02:e9:f4:75:3d:d3:10:2c:44:eb:39:35:48:53:6b:f5:2d:29:
         18:bd:b3:8f:42:74:9a:ca:c5:42:c0:3e:e8:10:70:6a:1f:fd:
         f1:a6:ff:2d:7d:46:17:aa:6c:40:02:a9:2c:bb:ee:58:48:df:
         19:24:dd:99:c0:de:8e:61:a9:ae:d5:a0:7a:5d:57:65:0c:02:
         f3:93:1c:28:3e:68:38:c7:57:a0:3e:a1:3a:5d:77:f2:f9:d6:
         7c:07:c5:44:24:ea:88:e9:2e:60:1d:60:b5:aa:84:fa:2a:b0:
         8a:49:4b:63:82:06:cc:bc:d9:88:f3:8e:37:b8:47:c1:33:0f:
         97:74:fe:b2:45:cd:44:51:d6:35:23:6a:fb:36:23:0b:93:fb:
         86:15:61:d3:3e:6a:27:73:a5:22:8d:5f:19:6e:2a:ea:7b:04:
         4c:bd:89:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:59:16 2024 by rpki-client on console-fra.rpki-client.org