Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa20c357-26d9-3fad-b418-24a2790b1231.roa
File:                     fa20c357-26d9-3fad-b418-24a2790b1231.roa (raw, json)
Hash identifier:          Q+sUPN/3R5aEfQyh3/QS7L/2ET3HgjDESZ75L6JVF8U=
Subject key identifier:   95:AB:86:06:36:CD:4B:B0:89:5C:D2:66:C4:D8:8F:53:1D:B9:9B:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5F568709327AF486A1CD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa20c357-26d9-3fad-b418-24a2790b1231.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.54.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:f5:68:70:93:27:af:48:6a:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=fdd34a6f-03d5-4fd6-aae3-4cc87f85eb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:e5:2a:92:67:fe:37:83:6d:d6:77:bd:45:
                    87:4d:59:69:a1:9f:71:00:93:1e:8c:9a:02:1a:51:
                    2d:fe:1b:ef:41:0f:7d:ea:74:e1:7a:92:9a:59:03:
                    bb:42:a2:1f:ff:09:52:5c:4e:3c:58:a1:a7:6a:29:
                    26:a6:27:ea:5b:11:fe:c4:41:03:76:af:4d:85:ec:
                    26:0d:13:5f:5f:36:a0:12:17:21:c8:b1:cd:d3:b5:
                    32:dc:e0:53:03:d9:d1:75:eb:5f:15:94:8d:e4:3e:
                    54:f2:2a:9f:fd:ff:2e:4f:e8:b5:c0:76:39:67:1e:
                    47:e0:63:1c:c9:e2:89:99:f3:24:bf:a1:99:fc:96:
                    ad:c3:a0:dd:9a:ea:8a:98:cb:db:46:00:95:83:58:
                    cc:e6:41:9c:5a:58:d6:18:3a:dc:f9:5c:8f:a2:63:
                    51:d2:af:43:c0:1e:c1:6f:8a:09:b8:0d:af:ce:f2:
                    2f:83:f4:07:4f:28:41:70:99:bb:1b:bb:65:2b:58:
                    72:98:b7:d1:e5:b8:a7:12:64:1d:1c:af:aa:28:37:
                    e6:2e:8b:aa:2d:87:0b:1f:0b:52:b7:52:e7:4e:bb:
                    9b:70:bf:52:7d:70:e8:12:3f:79:ef:8d:d3:8a:bd:
                    94:df:d7:78:6f:ee:21:a1:cd:0a:40:59:62:33:1c:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AB:86:06:36:CD:4B:B0:89:5C:D2:66:C4:D8:8F:53:1D:B9:9B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa20c357-26d9-3fad-b418-24a2790b1231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.54.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:28:49:6a:74:f7:9e:56:6a:bc:54:31:b7:3b:3b:35:eb:78:
         8b:94:cd:1b:f1:94:92:fe:96:a5:e9:86:84:a2:89:cd:4f:9b:
         a9:8e:97:7b:73:2e:d3:ea:79:3d:5d:d4:25:e4:bb:8a:c1:cb:
         36:77:72:7a:90:4e:e9:14:bf:a8:59:54:90:f8:7e:50:3f:b3:
         41:e9:70:8a:f3:62:6a:30:5f:89:22:6b:4a:4f:14:1f:0b:5d:
         29:2b:aa:1d:c3:14:e8:5b:45:5c:06:3d:f8:5f:53:e7:66:da:
         a4:4b:a5:60:f4:dd:46:30:7b:d5:4b:a8:79:ee:cc:59:80:a2:
         97:09:b7:8d:59:b9:fd:2e:45:5b:4e:2b:f1:24:0b:7c:44:28:
         4b:ec:c5:e9:53:8c:88:47:52:68:be:d1:dd:67:2e:0a:ab:57:
         fa:7d:9a:af:cb:39:ec:80:eb:1d:3a:26:0a:e1:1b:57:7a:a0:
         0b:46:27:13:c7:9f:f1:97:e2:20:3e:21:71:ec:03:fd:66:ed:
         8b:87:45:39:af:e0:20:ba:e9:b3:8e:bc:0d:52:22:64:31:f8:
         ae:90:d4:35:38:31:b3:cf:7e:3c:01:5d:e4:c0:ca:68:97:8a:
         a6:32:b2:7d:42:8b:09:9f:41:f5:ef:c2:0d:bd:a1:43:87:c0:
         5e:db:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:38:48 2024 by rpki-client on console-fra.rpki-client.org