Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
File:                     36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa (raw, json)
Hash identifier:          HuiQaQF1XF8fk7R3FbZ9fyWS98adO6hmiHpxdEfcEpY=
Subject key identifier:   B4:94:B3:F8:7A:5B:4E:FD:F1:2C:DB:2D:5F:A2:6B:53:EE:27:6D:74
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584812D52A76D48F3D9B8ACFAC80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     55002
IP address blocks:        166.73.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2a:76:d4:8f:3d:9b:8a:cf:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=73c90c27-1160-499f-86ce-c33affd7ceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:1d:45:33:07:b0:2b:13:37:df:d3:ad:ce:
                    08:a4:dd:ac:e4:bb:c1:8c:a3:f3:76:b0:54:2f:44:
                    cb:1c:e5:c6:a5:2f:78:59:70:71:bf:6f:03:aa:fd:
                    f5:7b:a3:43:83:6e:e3:19:a6:e9:81:ac:cc:99:4a:
                    e1:f0:6b:55:0d:fd:7f:6e:e9:0b:d0:d9:09:9d:2f:
                    73:f7:56:cb:72:17:0c:6a:5d:a5:e3:b9:ff:3e:1e:
                    38:a0:e7:dc:71:4e:dd:13:85:66:7e:37:cd:77:56:
                    eb:46:3e:eb:49:52:d2:77:08:b5:23:f1:ea:bb:2a:
                    b9:25:03:e9:ae:4a:dd:d3:da:29:02:67:0d:00:86:
                    62:9a:7d:ef:94:f7:4a:21:0e:e7:24:f2:d2:71:b1:
                    47:68:fa:84:a0:78:85:4a:d8:4c:1a:20:2e:2a:22:
                    ed:85:3b:3c:c9:9b:b8:3d:4e:b9:b1:1e:18:7a:f8:
                    84:ab:07:72:33:66:ae:ec:16:63:0d:b9:a4:a3:72:
                    29:e8:2f:58:d6:36:2e:0d:b5:a9:46:ec:2c:73:73:
                    d2:6f:d9:91:e9:69:8f:ee:e6:26:a0:bc:7f:09:89:
                    7b:f9:8d:9c:68:17:e5:e7:8a:1d:95:b2:97:55:91:
                    a7:71:67:34:82:e1:fa:b7:7f:dc:e5:77:8e:d4:c8:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:94:B3:F8:7A:5B:4E:FD:F1:2C:DB:2D:5F:A2:6B:53:EE:27:6D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.73.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:94:64:81:2e:b3:d9:46:6f:84:24:01:82:b7:75:97:96:
         0e:37:ad:b0:ed:be:9d:58:6f:16:ee:e9:90:f6:47:8c:bb:0b:
         13:7f:e1:89:8d:7d:26:8e:ea:54:46:d3:a3:72:9f:e6:cc:88:
         e3:22:ae:52:f6:49:dc:24:ab:ed:21:07:68:a2:c7:86:ec:29:
         a6:c5:4e:c9:c1:ac:9b:58:93:6a:d2:bf:60:5f:d9:4b:c7:0e:
         52:70:c8:5f:0d:4e:df:62:3a:cd:b5:a3:c2:0a:22:63:2a:4e:
         18:4b:26:cc:91:49:f5:b4:72:87:31:24:85:61:a2:80:1a:59:
         34:64:53:5f:6b:1c:7d:a6:a5:32:b5:a9:bb:b5:85:0a:91:8b:
         a5:24:db:87:e1:2c:87:29:5b:72:60:e8:d6:d0:54:e7:b9:d3:
         5c:60:c0:82:56:82:44:7f:48:65:99:dd:02:d8:a3:1f:e2:58:
         c9:44:0a:44:09:dd:64:50:57:ac:92:59:ce:92:a3:3f:35:38:
         27:50:89:d9:45:eb:ed:a6:6c:3e:4d:e8:0d:1f:a2:74:46:81:
         74:1a:33:8f:00:3b:55:c6:78:94:83:d4:76:4b:24:87:2d:e7:
         6c:e9:11:c2:9c:a6:51:bb:61:81:cc:57:88:ff:53:ee:db:14:
         aa:4d:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:22 2025 by rpki-client