Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f163b8e0-1716-318d-b8cb-b9e35a7040dc.roa
File:                     f163b8e0-1716-318d-b8cb-b9e35a7040dc.roa (raw, json)
Hash identifier:          lzR0dYz3Bt4+7RW6wJuLOzq4WoDlxXgiZBb2Cner76E=
Subject key identifier:   68:F8:4C:52:FA:37:17:08:E3:EE:7D:CA:D6:AD:4F:1A:FA:D0:68:A0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AEE138F9A712FCD2A5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f163b8e0-1716-318d-b8cb-b9e35a7040dc.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.142.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:ee:13:8f:9a:71:2f:cd:2a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=24ff62cd-3c0c-4a84-8aa4-d42d7c3af3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:a5:24:59:08:30:bf:33:15:dd:4a:6e:31:
                    97:bd:4c:28:f8:4e:07:18:01:ee:5b:10:e7:8c:2f:
                    08:66:8b:63:e1:e2:73:d9:f5:f7:e3:c1:35:1b:ca:
                    46:63:f5:b6:1f:e4:a2:c6:00:9d:ab:bd:3f:ba:9d:
                    c4:f3:83:6d:e1:94:ba:b7:85:11:41:80:3d:4c:72:
                    fa:e7:d4:ec:fb:3d:c0:79:52:b9:de:73:4b:ad:2a:
                    d0:6a:6b:a0:35:e7:78:6a:67:19:0f:47:04:3f:cb:
                    38:91:04:60:49:46:72:23:64:2d:75:c3:cd:37:d2:
                    83:3e:23:ea:31:a5:be:36:a3:48:1a:59:fe:02:b3:
                    c5:5f:69:77:9c:12:52:c9:53:d9:e2:68:c1:15:53:
                    e8:99:56:1a:21:b2:54:26:e9:68:7d:0b:e2:50:c4:
                    90:1d:c0:a1:5e:c3:44:b4:36:d2:91:ce:68:8a:41:
                    6e:01:e2:f6:d1:af:3f:b6:c8:3a:62:ef:4e:f1:d5:
                    39:b6:3c:ef:de:1d:1e:c2:d1:79:6c:a6:53:36:db:
                    23:7e:ef:78:1d:7d:a8:6b:50:f2:2c:bd:c7:30:a0:
                    35:b0:6b:d0:44:5d:12:18:e7:4e:61:c0:93:53:41:
                    75:8c:ba:2c:90:dd:f8:16:59:78:57:46:66:b5:60:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:4C:52:FA:37:17:08:E3:EE:7D:CA:D6:AD:4F:1A:FA:D0:68:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f163b8e0-1716-318d-b8cb-b9e35a7040dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.142.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:ca:42:f2:f9:f1:84:02:0e:62:ad:d3:97:e1:04:91:b9:
         cb:f0:33:da:09:78:89:69:53:dd:87:fd:f7:ca:52:fe:5e:2c:
         16:de:db:d3:e2:e0:07:3c:6d:ae:ba:41:04:9f:ac:91:02:6b:
         5e:ea:53:c5:3a:9e:df:bc:75:99:13:ad:51:01:af:86:9e:cf:
         9e:8d:47:67:ca:b8:44:13:71:ca:5e:ee:d9:a7:f5:99:c1:83:
         e1:bf:43:56:80:70:04:3e:a3:c6:0e:7b:9d:a4:1d:b8:15:9c:
         a0:67:23:2d:fb:3f:4c:27:fc:b0:c2:a8:0e:d3:d6:f3:eb:84:
         15:e3:68:f1:f3:21:ef:16:4a:a6:62:98:7c:8a:3c:0c:92:59:
         53:13:b6:13:81:a5:44:d2:14:1a:5d:bd:86:23:e0:e3:da:0d:
         df:d0:12:5d:10:78:ff:02:51:47:9e:23:a1:45:c9:ce:87:aa:
         58:9f:27:3d:4d:f7:df:a5:4d:15:fd:65:4c:61:19:c1:86:99:
         49:57:e4:90:a1:d6:b8:ac:ec:e5:68:21:ae:43:2f:25:99:ee:
         c7:6f:8f:fe:ae:b4:8e:8d:dd:2f:97:c4:ed:d3:be:3a:f6:0f:
         a2:33:52:1a:ef:32:cf:ae:5b:c6:17:a2:eb:03:46:f0:78:22:
         3c:a2:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:19 2025 by rpki-client