Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa
File:                     8cd88115-ad3c-3f60-a96e-05e1840d82be.roa (raw, json)
Hash identifier:          XGFupWLOFR4ZGSSEfPCQ7X9hng9JuoJ6K7T3FKA19p8=
Subject key identifier:   7A:E0:4C:E1:6C:06:3C:BE:72:39:65:F5:EF:C9:22:B1:F0:59:E8:88
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F432858473FF0A243EF3192D0EE813700
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     33436
IP address blocks:        172.82.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a2:43:ef:31:92:d0:ee:81:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=7d0ee7db-f147-4dbb-be21-33d449360b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:98:6b:19:31:fc:86:a1:da:86:95:fd:7d:
                    83:70:ff:06:50:68:3d:d6:f6:19:07:6c:1e:0c:b4:
                    4c:96:25:00:b9:14:d3:0e:88:5a:36:d2:5b:6f:da:
                    65:5f:ff:38:3c:25:0e:55:c4:95:f4:f4:57:ee:e8:
                    b4:a2:c6:ea:2f:94:c3:d8:b0:ed:55:76:96:7b:b3:
                    0b:1e:c4:53:6f:e8:c1:74:c0:bf:41:57:b2:4f:74:
                    38:4f:e0:cd:01:e6:d7:8c:31:91:5c:7c:5b:41:a2:
                    b2:51:9c:5c:8d:b8:13:d5:b4:93:34:83:8e:d2:0b:
                    9b:aa:d8:ab:0e:73:08:9f:0f:3a:34:76:69:9a:78:
                    e8:52:0e:ac:29:5f:a3:fd:74:d8:61:f4:86:9a:3e:
                    a0:3a:97:65:aa:1d:0f:5a:1c:9a:ad:70:76:33:e9:
                    b8:40:e2:51:06:67:a5:95:8a:e9:e8:ec:0f:a4:97:
                    46:54:d4:69:90:b7:87:53:ba:22:79:fa:6d:e2:fe:
                    bb:3a:12:fa:78:41:62:5f:57:88:8b:e5:6d:55:84:
                    91:f4:e0:8c:7c:2c:d2:4b:ef:b8:41:0d:d5:4f:1c:
                    b0:d9:f1:75:3a:5f:bf:33:c5:a0:c6:c6:66:7a:8b:
                    fc:3b:8d:6d:c8:13:95:92:d6:f9:90:c5:4c:61:fe:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:4C:E1:6C:06:3C:BE:72:39:65:F5:EF:C9:22:B1:F0:59:E8:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:a6:12:80:a0:94:3d:d4:33:1d:32:e2:1f:00:5c:3b:62:
         f1:86:03:00:db:df:59:e1:2c:81:c9:6d:48:72:8c:aa:a4:1f:
         48:28:fb:54:e2:ce:37:a7:18:8a:a4:34:e6:44:0c:16:88:de:
         dd:bc:7c:b8:31:d8:17:47:65:19:53:d8:68:d3:7a:31:5d:3d:
         b0:73:8c:6a:45:78:90:19:f2:9f:e9:ec:67:54:86:6d:c0:2b:
         32:5e:28:2c:e5:20:30:8a:2d:30:bf:f4:2c:6f:6e:4f:18:38:
         64:26:3b:66:43:52:68:b5:ba:c4:a3:ea:6e:d1:72:e2:28:9d:
         e3:68:68:da:ea:65:9a:43:04:ee:65:fc:ad:84:c0:b6:ac:82:
         70:a7:38:da:96:4d:fe:2b:a4:5c:5d:ce:4e:ca:81:e5:e1:12:
         25:01:cd:73:02:6c:ad:04:d4:4e:3c:fb:d5:a0:cf:32:06:ff:
         a3:2c:89:f1:02:f4:73:7b:aa:bf:f2:1c:18:c8:99:3d:ee:07:
         c7:d9:ce:88:0e:25:a7:59:43:0a:03:d5:aa:e5:73:64:51:f2:
         82:f1:87:8a:0a:5b:34:75:f1:45:6f:b3:d3:36:74:5b:79:38:
         47:18:03:ef:66:c4:22:44:b2:6c:06:6c:12:4f:ba:5d:a9:f0:
         db:57:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:53 2024 by rpki-client on console-fra.rpki-client.org