Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d1aa998-ca98-3f37-8579-562eaed984d2.roa
File:                     0d1aa998-ca98-3f37-8579-562eaed984d2.roa (raw, json)
Hash identifier:          ZWUNwm1Zz3dom8pLaFkxx0S4Wwg4HEGaw2D6LTNoL2w=
Subject key identifier:   E1:BF:C8:4D:14:44:A0:F0:33:BD:A0:79:BE:2A:CE:41:5F:81:D6:68
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F4A18C8D21B61A57A50E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d1aa998-ca98-3f37-8579-562eaed984d2.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        174.95.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:4a:18:c8:d2:1b:61:a5:7a:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e95e9108-7d82-4681-8383-22033d43701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:d4:1b:3a:bc:6d:00:c0:bf:48:03:7b:1e:
                    05:24:23:5e:7a:fa:d4:24:34:8f:13:b1:1e:59:b2:
                    b1:84:29:ff:18:44:16:77:3e:7f:0b:01:7e:85:98:
                    e4:56:a2:3f:78:af:68:0f:e0:bf:85:31:0c:65:d6:
                    88:27:86:3d:b8:24:84:3b:62:1f:0f:c2:29:3d:c5:
                    05:48:a3:b7:36:b9:cc:af:3c:b9:6c:d4:59:79:48:
                    a1:da:c6:1e:d3:c9:df:d9:ed:a9:8e:8f:bf:42:72:
                    a5:d5:04:b4:d7:7f:0f:67:9f:9e:f1:8a:f6:9e:93:
                    2f:c9:20:a8:95:fa:c8:77:e5:b3:ce:0a:ab:d1:82:
                    dd:6f:80:98:34:9c:89:aa:b4:a9:42:f9:80:f7:6d:
                    65:b0:75:bf:ad:2f:07:a7:cb:7c:53:e9:f3:d9:fc:
                    6f:02:ad:22:77:a9:76:a4:e5:eb:64:a3:8e:49:cc:
                    ae:30:40:44:77:67:88:fc:6b:7b:fc:aa:fd:e0:72:
                    e6:f1:00:3c:d3:9c:e4:6a:eb:7d:3f:26:8d:d7:85:
                    7d:94:b4:38:5e:f3:a8:d1:f7:c2:a6:e5:f2:f6:ba:
                    a7:15:2e:2f:bb:64:ed:a7:6d:20:98:c1:67:cf:5a:
                    c3:e7:cd:51:9e:14:05:b9:28:55:53:7e:57:ca:3b:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:C8:4D:14:44:A0:F0:33:BD:A0:79:BE:2A:CE:41:5F:81:D6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d1aa998-ca98-3f37-8579-562eaed984d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:ee:b4:bc:52:fb:2e:52:f6:cb:2c:ee:db:97:3e:dc:4f:
         c0:19:76:55:9b:70:49:74:8c:72:4f:23:33:2c:da:24:45:4c:
         6c:76:ee:05:9a:95:52:8e:6e:b3:c7:60:22:f7:39:54:cf:22:
         67:fa:31:cc:cc:53:11:5c:84:7d:22:0d:49:0d:3d:15:bb:53:
         f6:2e:4e:5d:0f:37:2b:96:a5:13:b5:8e:29:81:98:ce:92:9e:
         8b:91:68:7d:43:20:5b:39:7c:72:7d:4e:fe:e3:b5:53:bb:70:
         f2:97:fb:aa:6a:43:bf:f5:78:03:54:3d:35:c6:48:38:d7:7b:
         43:f5:2d:3f:9e:4c:48:ca:cf:b2:8b:95:be:44:c6:28:f0:63:
         e3:a0:72:41:e6:ec:8d:d0:f0:7b:e3:03:8b:64:3f:f1:6c:c2:
         d4:5b:c5:bc:ca:f5:55:af:97:fc:8e:9e:7d:9e:75:47:aa:47:
         0b:a9:b6:76:09:3b:10:bb:f4:95:9e:03:26:4d:94:8e:33:c2:
         f1:2f:b1:96:e8:3e:df:95:df:6c:2c:0c:c0:70:38:fb:d9:d3:
         0a:27:36:af:4a:8e:5a:0e:2f:2b:2a:e4:1f:52:c8:03:07:4c:
         b6:1e:2a:60:28:3e:c4:0b:b5:00:5f:bb:f0:c9:1a:4c:49:ac:
         9b:67:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org