Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f159f339-58ae-3593-a3d8-b6e4a88696d6.roa
File:                     f159f339-58ae-3593-a3d8-b6e4a88696d6.roa (raw, json)
Hash identifier:          oueirUIUiUB0mZw7ldO2sv76sRnpYkUiAyqNE1PTfpU=
Subject key identifier:   80:4A:C5:6A:23:98:88:76:28:D8:AE:0A:DA:9F:6C:DD:44:3F:F8:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C73F1DED3855DA8C4F880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f159f339-58ae-3593-a3d8-b6e4a88696d6.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.74.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:73:f1:de:d3:85:5d:a8:c4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=cbbacaa9-d351-432b-9cc7-4c7a645d749a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:cc:2e:42:90:cf:ce:0b:70:43:35:2e:67:
                    dc:9b:2e:bc:ab:15:fd:9b:cb:8e:af:21:78:bb:4b:
                    b4:eb:9b:e8:fb:ed:43:21:90:e8:87:a4:02:da:10:
                    b4:ce:76:02:8b:85:6e:51:37:cb:79:be:51:2e:15:
                    c0:e8:cd:88:f2:62:5c:e0:e1:55:ac:10:33:17:ab:
                    ff:0e:7a:a2:b1:47:3e:dc:c2:68:9e:4e:ba:55:fb:
                    db:94:9b:95:65:bc:c3:e7:50:87:cc:51:c2:fd:bd:
                    6b:f6:cc:24:75:42:86:24:b1:48:21:20:3c:7a:b5:
                    32:cb:3f:7b:9a:7b:88:b4:97:0b:96:47:6b:c0:25:
                    4b:f8:88:fa:ba:cc:a6:da:d6:24:56:ea:b6:02:94:
                    7a:b1:cf:2a:02:8f:fa:a9:81:38:85:9f:f6:3e:8d:
                    b5:e5:f1:e6:73:a4:15:3a:b8:0d:70:f5:8b:70:2e:
                    33:f0:b0:fe:07:35:a0:56:ff:6c:9f:45:f2:6a:ed:
                    95:0c:b5:34:85:29:e6:93:46:31:3d:4d:93:b4:fe:
                    d7:33:6f:eb:ba:e8:7d:83:e5:58:2b:73:38:4d:36:
                    be:45:b4:27:d4:3f:b5:cc:2e:1e:53:e8:e6:a4:4b:
                    8f:f3:be:57:7e:4f:0e:16:b5:e2:b6:c4:95:1a:b4:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4A:C5:6A:23:98:88:76:28:D8:AE:0A:DA:9F:6C:DD:44:3F:F8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f159f339-58ae-3593-a3d8-b6e4a88696d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:0c:de:50:a4:23:dd:d2:24:b1:e2:14:4c:13:2d:bd:86:
         b8:29:b0:75:4d:bc:0e:a1:81:55:b2:6b:e5:d4:d2:7b:e8:da:
         b7:13:75:86:f7:5c:69:b7:6b:19:f4:57:20:f9:66:21:ae:56:
         48:31:42:70:1d:1a:96:45:ea:92:ca:9b:17:18:7c:a1:28:b9:
         3e:2b:47:18:13:e5:69:be:aa:a5:25:8b:4f:e4:fe:27:56:33:
         77:62:08:8a:64:b5:e1:f8:d0:a4:9e:ca:be:b1:d0:08:e7:74:
         88:14:10:8c:17:88:62:a8:6e:85:f3:85:c3:48:20:c6:d7:d3:
         fd:40:d1:99:1a:16:b5:6c:e7:ca:60:f4:7f:57:5b:6f:21:c1:
         82:e3:4e:83:42:c3:7a:60:25:87:70:6a:55:d4:75:f3:b9:77:
         85:f4:d8:8b:b9:c7:28:ed:bb:23:7c:6e:74:aa:b9:25:1a:35:
         07:64:48:07:a9:68:d6:98:a5:a8:a0:6d:f5:91:d9:e9:df:51:
         4a:d8:4b:d1:9c:f1:3c:1e:81:bf:4d:44:96:c2:78:57:c6:7d:
         25:04:23:8a:3f:68:a5:4f:30:52:36:22:6b:3a:b8:87:7a:f0:
         76:d0:9f:62:8a:74:15:59:fc:b7:19:82:d4:c0:b3:a9:4b:c8:
         6d:5a:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:23:53 2024 by rpki-client on console-ams.rpki-client.org