Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cacdbe7-7a5d-3b0e-8b79-12e8e7a83ba3.roa
File:                     0cacdbe7-7a5d-3b0e-8b79-12e8e7a83ba3.roa (raw, json)
Hash identifier:          xdWpoVsEYtvqilo3M9xho9OFg0SD8lEvxpAjKkA0tr0=
Subject key identifier:   2C:F2:83:18:0D:28:29:B2:A1:00:64:24:79:C3:F3:6D:6C:E9:4B:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C68F7CB7217FCD32AA2340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cacdbe7-7a5d-3b0e-8b79-12e8e7a83ba3.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        71.232.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:8f:7c:b7:21:7f:cd:32:aa:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e3290ea0-d557-4ced-8d3d-7c2478ef0509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:30:40:13:77:8c:05:e2:59:1d:03:41:ba:
                    95:71:b6:e7:0e:e9:79:52:44:da:0f:a1:b0:3e:be:
                    e7:16:43:1e:9c:b7:89:68:3c:75:cb:fa:1a:48:07:
                    6c:fa:dc:8d:c2:92:47:0e:d0:47:74:3c:27:f4:0e:
                    80:f5:33:97:5f:a8:c7:97:3d:05:ac:c1:49:70:34:
                    ef:94:2c:e0:89:5e:87:61:15:47:4d:c0:69:59:48:
                    66:8a:a2:28:f8:5a:aa:f8:1d:bb:34:26:29:01:70:
                    43:e2:71:a6:a2:bc:0b:57:47:08:3f:4b:9b:0a:9b:
                    dd:28:6a:c7:b2:ab:33:89:38:c5:c8:45:d0:41:2a:
                    f0:b6:82:8e:f7:f9:62:dd:b5:ae:50:b9:b6:e8:56:
                    04:86:52:58:d1:c4:c0:b3:28:41:6d:89:73:f5:0d:
                    40:35:a6:32:86:a1:e4:1b:f5:d5:2f:a7:16:96:67:
                    4a:de:97:1d:08:17:d8:61:a7:2f:f0:b6:30:7c:76:
                    b0:b9:f4:57:84:c6:4e:3a:cd:f2:15:b3:d0:c7:a3:
                    b5:b7:01:74:33:be:1d:90:f1:3c:f3:b9:38:a5:32:
                    44:77:af:d4:2b:fd:f6:3d:9b:b5:13:81:3c:54:e5:
                    3b:a5:0a:e6:c4:ba:5e:81:8e:d3:2f:e4:d7:39:2c:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:83:18:0D:28:29:B2:A1:00:64:24:79:C3:F3:6D:6C:E9:4B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cacdbe7-7a5d-3b0e-8b79-12e8e7a83ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:c7:78:4f:be:6a:5b:3d:a9:74:a8:0e:ba:e4:c3:c0:e9:
         c2:77:d7:48:9a:6e:ac:f1:ec:9c:c3:84:e7:e9:fb:f3:d2:5c:
         43:3d:55:d4:25:34:86:38:06:07:a1:d1:a7:1a:56:22:66:3b:
         36:3f:73:4e:8f:e1:a6:38:81:73:73:a9:5d:c1:5d:e0:ef:49:
         8f:49:cd:6c:e7:f7:e4:b2:c8:68:f2:82:8c:9e:7b:e0:89:c7:
         70:ff:a9:28:21:f6:48:58:c9:cb:da:c5:6a:25:21:bd:5e:c0:
         f1:c4:a3:01:94:79:ca:6e:0e:16:5c:a4:76:60:32:97:e8:f6:
         3d:6d:a4:19:be:64:3e:67:16:84:40:52:bd:36:f1:85:ee:16:
         21:99:46:94:09:1c:a0:a0:b6:07:9a:7f:07:ec:05:00:bf:3c:
         16:1d:11:9a:cf:85:eb:58:78:c2:1a:dc:10:f1:cd:82:e7:f4:
         c9:c5:5a:18:78:ea:c7:9e:7c:63:5c:72:3d:7b:55:4c:ff:8f:
         d7:05:95:c8:8a:ea:f2:f4:4a:cb:ef:94:7a:7d:60:00:ad:e8:
         89:ff:7c:6f:b5:bf:eb:97:ec:2a:73:8d:9e:d9:4d:d1:9a:69:
         46:de:87:1a:a3:0f:c1:17:d8:11:58:db:4d:08:6b:f8:de:ce:
         7d:91:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:08 2024 by rpki-client on console-ams.rpki-client.org