Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/016e8777-bfdc-3d21-95bc-07da270fdba3.roa
File:                     016e8777-bfdc-3d21-95bc-07da270fdba3.roa (raw, json)
Hash identifier:          oxI6mwoHGoV4aUG6RkqwKIjXokIb0TZoyDus9+paNOo=
Subject key identifier:   14:14:4A:1B:0C:33:E2:FB:8A:94:03:10:D2:FB:81:B2:B7:E7:CA:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF78B2D8D6E1EAA08AC2280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/016e8777-bfdc-3d21-95bc-07da270fdba3.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        71.195.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:8b:2d:8d:6e:1e:aa:08:ac:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=cd0e76ad-621b-4150-915d-7469f95550f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:79:82:b3:74:f4:48:db:9c:09:2f:30:17:
                    a7:ea:23:4b:40:62:a0:b0:d1:89:b6:b8:22:c6:d5:
                    71:2b:ec:cb:7e:11:24:23:64:22:55:db:e0:84:67:
                    1d:ed:be:73:e5:3a:1c:c5:e2:e7:54:bf:65:db:84:
                    78:68:2b:ab:cc:dc:f8:63:33:b5:ca:bb:21:0e:09:
                    5f:80:f9:2d:10:00:60:20:7f:bf:7d:17:61:59:a3:
                    0a:0f:3e:eb:80:32:e0:2e:a1:61:56:4e:32:ce:54:
                    1b:f9:31:6d:be:a0:18:99:f8:3a:a0:c4:01:e7:aa:
                    e8:2b:e2:05:95:71:58:81:1e:37:fc:46:e8:f6:d0:
                    7b:b3:4f:a1:5d:6e:74:e5:2e:df:e4:a0:98:d6:9f:
                    01:82:ac:e6:5c:7a:c7:eb:dd:70:cd:f4:12:1b:a1:
                    16:b3:78:74:c8:f2:6f:54:6b:18:4b:86:fb:e9:8a:
                    1c:aa:8f:79:08:77:c7:1c:ea:08:fa:94:ee:01:fd:
                    ae:aa:98:ae:27:65:1e:8b:72:49:dc:b0:f1:8b:24:
                    04:d3:c9:10:bd:bf:c9:1c:f5:42:9b:b7:75:be:83:
                    c0:a1:b0:9b:74:af:eb:26:14:0e:9f:ea:4f:50:6f:
                    97:1a:28:fb:f4:5c:29:73:86:45:17:14:ed:7d:ba:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:4A:1B:0C:33:E2:FB:8A:94:03:10:D2:FB:81:B2:B7:E7:CA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/016e8777-bfdc-3d21-95bc-07da270fdba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8d:67:02:26:36:62:c2:59:15:90:ea:8f:88:e7:12:d3:b4:
         bc:bb:e7:45:d4:10:65:c6:80:4c:55:dd:0d:a7:ff:27:5a:90:
         09:53:02:d7:85:e8:a3:42:ea:ce:e2:64:fc:01:55:21:2e:ba:
         9b:c3:41:ea:02:a6:92:52:5a:ec:fa:e3:80:ab:30:2b:3b:25:
         50:b4:7f:f4:17:cf:b1:b5:ab:4b:b8:09:e7:07:11:d0:3b:68:
         ed:1f:cc:1f:d3:f4:9e:88:9a:83:0a:08:7d:4c:dc:ed:65:e8:
         e2:9c:8a:66:1d:1a:42:7d:31:87:48:96:af:d3:bd:21:22:c8:
         1e:4c:eb:73:d3:92:aa:39:05:c6:c5:b5:bb:06:ca:7c:3e:04:
         db:04:81:8a:72:db:f4:a9:1e:4f:e5:fb:93:96:d9:ef:6c:e4:
         31:0e:ca:9b:e0:bd:58:79:1e:23:f2:cf:54:0d:fb:a2:40:3d:
         41:7a:d3:6c:63:ef:44:41:1a:00:b5:a0:6c:77:e6:58:e6:b9:
         e1:b1:fa:a2:84:ef:2a:9f:f6:69:bf:7a:9d:6c:33:ce:0d:8e:
         85:e7:05:b5:f3:36:55:f9:0a:9a:b2:28:44:54:50:ea:bb:54:
         4c:06:8d:de:a5:fd:89:a3:c7:1b:2c:90:bb:2d:9a:73:44:ce:
         2f:c1:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:24:08 2024 by rpki-client on console-fra.rpki-client.org