Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fda1932c-867b-3c35-ac95-7a1ab21f6780.roa
File:                     fda1932c-867b-3c35-ac95-7a1ab21f6780.roa (raw, json)
Hash identifier:          4kbfNb6uF3rZpgFkavwefSazPXE5Eu1W8j/Ws0Of5AA=
Subject key identifier:   A5:68:A8:84:D2:0A:B6:71:21:8F:68:4B:37:C3:51:2C:AF:03:B0:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C6B619B54FF73E7A23F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fda1932c-867b-3c35-ac95-7a1ab21f6780.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        73.73.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:6b:61:9b:54:ff:73:e7:a2:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0402451c-1852-4027-bfd2-b00d2c71f3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:1b:7a:22:a5:5a:ea:1c:72:d1:fd:fa:17:
                    98:ee:49:68:59:f2:e4:42:74:b6:ee:8b:ec:60:0c:
                    1f:57:bc:de:d1:d1:cd:6b:d6:46:29:b9:f9:cb:0c:
                    10:15:71:0f:59:e6:1a:6a:72:70:56:fc:58:11:96:
                    c2:1d:7f:94:a2:70:f6:98:de:0c:dd:f4:e2:54:07:
                    bd:e0:37:54:1b:c5:ce:a6:13:9e:5c:9d:d6:44:10:
                    02:9f:f8:5a:d4:17:33:c5:2a:e5:fb:e9:41:da:06:
                    27:49:c5:e7:01:56:e3:72:73:0c:55:4d:84:2d:d0:
                    7e:bb:cf:2f:16:9f:19:de:d7:1e:04:3c:14:64:9c:
                    f8:d7:d6:b5:87:fb:20:aa:3b:a0:d4:1c:a0:b5:a2:
                    f9:fb:4f:6f:bf:c0:32:28:d5:46:db:e6:de:5e:01:
                    13:83:10:57:55:40:a7:2a:72:a6:7c:c0:6c:19:51:
                    7c:d2:76:b2:3c:49:1b:d2:02:e3:d6:1e:a9:4e:0b:
                    35:f7:b2:f6:fb:77:68:c8:75:97:0b:6e:7f:dc:63:
                    db:b5:e0:05:15:d4:61:f2:ac:0c:8a:1d:21:8a:c3:
                    89:f6:3a:93:3c:7c:b3:de:39:70:d0:1e:82:25:13:
                    f3:b9:53:07:f7:57:bd:f6:c4:3a:e0:b7:06:d9:72:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:A8:84:D2:0A:B6:71:21:8F:68:4B:37:C3:51:2C:AF:03:B0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fda1932c-867b-3c35-ac95-7a1ab21f6780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:04:d6:1f:3d:14:c6:51:50:fc:9f:ad:a3:97:7a:7e:31:ed:
         0e:d5:bc:f1:a5:27:67:f9:03:9b:04:06:d9:e6:f3:49:39:13:
         7f:a8:ea:d2:15:67:af:8d:de:87:87:ba:7e:65:ed:42:b1:8d:
         01:15:bc:d9:16:c0:fc:2c:60:42:b7:9f:7e:f3:d4:25:c8:b4:
         73:c4:cd:90:94:c1:ef:64:75:0b:41:91:31:81:86:2f:32:46:
         78:be:01:de:44:5f:b2:b8:ca:80:94:78:d6:1f:52:32:2e:8d:
         c8:f1:f6:d5:64:4a:6d:6d:60:e4:6e:93:86:1e:c7:b1:b3:f7:
         c1:17:c2:e9:7a:2e:1f:85:63:8a:35:0d:c9:df:23:a3:88:ac:
         38:b7:3a:88:b9:1e:b0:67:b7:39:4e:4f:d1:f4:95:21:0c:eb:
         38:90:a9:83:1f:17:73:de:ea:05:70:15:20:aa:27:7b:ac:d7:
         a9:28:c2:40:ee:c1:96:a9:6c:0b:97:b9:33:f7:d1:6b:eb:da:
         3c:62:fb:24:6c:92:dd:47:cf:6c:fe:24:06:1c:02:59:42:d5:
         8e:a8:77:91:99:45:a8:1e:b3:53:de:a0:a9:98:64:b3:63:07:
         db:44:3d:02:37:f6:3d:90:88:21:14:d3:92:61:db:da:a3:a1:
         5c:5a:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:39:11 2024 by rpki-client on console-fra.rpki-client.org