Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/feb7c841-ce4d-344d-8ff8-ea496f6f18d5.roa
File:                     feb7c841-ce4d-344d-8ff8-ea496f6f18d5.roa (raw, json)
Hash identifier:          kUERKtv546qFr6fL4+0Kv8pWKo5bD+AuyI6an89ISZo=
Subject key identifier:   93:2A:1A:D8:30:3D:50:4B:2F:93:DE:88:C6:E0:E4:AE:39:E9:AE:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584811701569B6E6EE7314C61F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/feb7c841-ce4d-344d-8ff8-ea496f6f18d5.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.2.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:15:69:b6:e6:ee:73:14:c6:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=440d06f5-86ad-4449-b452-449811104b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:fa:0c:14:ba:f2:49:5a:89:ea:7f:dd:c0:
                    c3:c9:f8:49:c7:bc:5d:43:6d:31:e0:cb:fd:d7:d6:
                    ab:bd:82:82:4b:de:42:77:a4:03:ef:85:5c:62:ee:
                    13:0c:ce:f4:43:d3:fe:71:3d:ab:2e:ac:57:2d:11:
                    ee:8d:02:d4:b7:fb:e2:00:f6:ab:f7:f9:ef:52:0d:
                    e3:5a:d6:e7:81:0a:e4:7b:5c:a5:aa:0e:6a:6c:bd:
                    ff:f6:ae:ad:62:92:dd:20:e8:81:9e:7c:9e:f5:13:
                    a0:0c:18:b0:89:40:e4:ad:48:88:b6:b9:1e:d7:e2:
                    4a:85:05:a1:ca:16:c9:ac:e8:48:0b:ae:c6:73:19:
                    38:04:ca:05:dd:f2:1f:0d:bf:23:e5:45:9d:ff:df:
                    bc:b3:b7:53:4e:51:40:f9:f0:d7:a9:fd:56:09:7e:
                    19:2d:cb:bb:9b:56:61:50:98:1b:dc:a0:25:41:2d:
                    6c:cc:ec:cc:52:bc:d4:f4:2a:9c:d5:2d:35:0c:d2:
                    98:f4:7a:41:3b:b8:49:b5:e0:55:cd:01:4c:42:25:
                    66:ef:e7:30:8c:8b:16:a6:3e:f3:87:db:96:58:a7:
                    2f:c6:5f:78:f5:a1:ca:a2:b5:46:f5:07:11:ea:73:
                    a2:df:5f:40:6c:76:c5:26:bd:94:c8:50:a8:9f:30:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2A:1A:D8:30:3D:50:4B:2F:93:DE:88:C6:E0:E4:AE:39:E9:AE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/feb7c841-ce4d-344d-8ff8-ea496f6f18d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.2.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:25:58:83:11:f3:9f:71:93:2b:40:3d:ee:e7:27:9a:45:
         6d:f6:bb:ad:d4:07:dc:67:77:18:0b:05:c4:08:52:23:1c:7d:
         65:24:9d:28:9d:dc:a1:3d:c5:10:0d:96:ba:86:7f:3c:7b:ed:
         19:45:d6:20:5d:08:3a:b1:7b:48:7f:9f:4d:db:c2:e5:ad:b6:
         34:c2:48:11:1f:fb:2b:c4:e0:df:5c:d5:39:c4:85:fc:50:b3:
         64:78:26:40:89:8b:90:8b:f4:a1:27:d0:ae:26:67:34:54:cb:
         16:c3:61:1f:6a:2b:70:bf:b3:d3:7c:42:be:3a:55:12:4e:e2:
         4c:14:b0:aa:33:9b:11:14:97:4d:a5:1f:db:6b:57:f7:45:15:
         fb:80:49:dd:b8:82:be:81:3a:1f:84:e7:06:e1:b1:d7:97:8d:
         14:d7:99:bb:85:b6:76:af:82:2f:fa:a6:a5:e0:7a:83:84:2a:
         47:45:31:4d:0a:02:34:fe:30:04:e9:1a:1f:7a:c6:48:5c:4b:
         b8:a4:08:be:4a:28:ad:93:33:53:45:65:56:07:1a:67:dc:b1:
         8b:8a:bc:d5:5b:61:86:04:af:ef:3b:86:05:a2:be:97:0c:90:
         19:75:4b:87:5d:c1:06:09:6c:15:38:9f:ac:a0:05:6c:f5:d8:
         be:5a:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:25:43 2024 by rpki-client on console-ams.rpki-client.org