Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fee91824-7cd2-3fe3-88b9-0003bc20a02c.roa
File:                     fee91824-7cd2-3fe3-88b9-0003bc20a02c.roa (raw, json)
Hash identifier:          lJquPxAhVKW1UBuKUr6Sg/uDEKM9y7lMaNNDX3uVlxk=
Subject key identifier:   29:A1:43:16:3B:01:88:C8:09:97:2D:4E:B1:7C:8B:AD:AA:26:2B:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89C1FEA28F7EE592EE1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fee91824-7cd2-3fe3-88b9-0003bc20a02c.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.248.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:c1:fe:a2:8f:7e:e5:92:ee:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=be9113aa-aaf0-4526-a21f-62a13eae3457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:3e:af:8b:99:10:37:f9:e7:b3:43:e8:a2:
                    92:79:73:8a:85:b8:a8:bb:a3:67:df:e2:66:e2:64:
                    42:99:78:2e:2d:a1:a0:54:24:bb:4a:d0:46:dd:6a:
                    72:e2:b2:15:eb:30:ca:3e:fb:5d:02:01:d3:56:25:
                    68:f7:58:7f:ab:4c:0c:74:38:e6:4e:83:a2:d7:e5:
                    0e:f2:49:5d:f4:8f:3b:0e:b5:a0:99:67:58:f8:88:
                    9d:a8:49:e2:ed:e6:5c:cb:b9:a6:49:9d:6c:a6:d7:
                    9f:fe:a0:62:e7:66:4b:cd:90:cf:07:f1:fc:1d:b8:
                    b3:48:7f:a7:56:17:49:41:93:0b:ec:79:50:16:da:
                    d8:8e:71:2c:4e:65:66:9a:d5:d1:ac:70:12:fe:38:
                    b1:ef:8c:ad:32:57:d9:57:15:13:bc:0e:85:65:02:
                    e8:a3:39:eb:42:f1:c4:29:12:0a:48:07:96:3f:c7:
                    eb:65:fb:1b:eb:2f:e5:8f:42:71:bc:bd:f6:63:13:
                    c5:ca:95:3a:32:4a:28:57:e9:f3:58:91:70:e1:60:
                    6c:5d:3c:6e:9d:16:99:df:33:b3:db:f5:ce:21:bc:
                    4e:f4:9d:3a:5f:a1:75:02:98:00:a7:1e:89:ee:35:
                    d1:49:e8:8f:2f:88:5b:15:9b:d0:a3:55:b5:9e:9c:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:43:16:3B:01:88:C8:09:97:2D:4E:B1:7C:8B:AD:AA:26:2B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fee91824-7cd2-3fe3-88b9-0003bc20a02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:b4:2e:e4:8c:b9:d9:78:fc:d4:3c:6c:20:f7:94:34:6d:
         12:89:25:45:fa:d2:de:25:75:a4:f4:d0:91:8b:2f:fd:ef:ef:
         ae:8b:56:94:1c:06:15:8d:64:75:ec:83:92:85:7d:93:e8:26:
         df:57:c5:96:2e:68:19:80:ab:26:6d:e6:66:7e:26:b3:76:ab:
         b3:5a:6f:8a:d9:c5:13:bb:17:d8:b7:99:38:e5:a6:9a:f4:bc:
         bc:19:59:73:25:4d:fb:5c:da:3f:89:ad:8d:b8:be:23:e5:9c:
         83:40:d1:bc:8c:94:c9:7e:65:07:f1:09:6a:f2:f2:c5:c8:d4:
         55:4a:9d:99:a1:e5:7e:1c:61:86:36:ce:21:e3:7f:30:cc:43:
         89:b1:a5:19:47:fe:45:1b:75:e0:f4:6c:c4:46:4b:e8:4e:c8:
         7c:9f:6b:4c:e3:b4:43:fa:b1:56:1c:8d:11:4f:8e:7a:c4:3c:
         b6:c2:b7:d3:7a:12:18:5b:af:ca:c4:8d:00:03:ed:26:7b:43:
         32:31:b1:80:da:0e:c0:67:43:0c:ba:8f:03:8d:52:92:56:5a:
         f9:6a:96:d0:96:ff:15:fc:ee:b2:8b:2b:4a:10:2d:0c:db:9c:
         35:79:16:b3:e7:59:a8:7d:43:2f:92:76:41:e4:7d:73:f9:dc:
         9f:17:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:59:22 2024 by rpki-client on console-fra.rpki-client.org