Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa
File:                     0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa (raw, json)
Hash identifier:          ilX4t2T25vEE/g2rmOhs2D2wignOxR5kfVVxhXVVf+c=
Subject key identifier:   14:F5:E8:2F:7F:16:65:1A:54:1B:A6:62:6D:05:20:56:F8:55:7E:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8422394D995B3375CF4C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        70.88.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:42:23:94:d9:95:b3:37:5c:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b004c175-705f-489c-9609-f82a25a995bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:c9:9b:bb:38:95:66:cd:13:eb:1a:a2:6a:
                    43:c5:d9:f5:ee:dd:8c:d2:86:60:8d:63:1c:6c:ce:
                    36:b9:70:73:84:0d:77:32:bc:8f:b2:73:18:64:78:
                    9b:39:58:a6:1b:9e:52:ca:a8:6f:08:32:df:53:c1:
                    fb:58:9a:53:64:4f:31:93:e3:d7:46:1c:63:0f:01:
                    8a:c9:38:e2:fc:b9:60:69:35:9a:ce:0f:81:e0:74:
                    f1:ca:23:5e:c4:73:c7:5a:89:80:22:f7:86:2a:3b:
                    b3:38:c7:e5:bc:9f:63:a6:85:90:4a:2c:45:e4:07:
                    03:47:65:47:f9:1d:21:ad:41:39:c7:81:07:f8:7c:
                    43:8a:d4:a6:46:60:34:d4:ec:c1:60:5a:9d:6d:2f:
                    3a:c5:d4:47:69:6b:09:bc:db:c2:bb:10:f0:da:cc:
                    7c:24:3b:db:c2:8d:fa:fc:51:42:5b:37:8b:5a:b7:
                    83:c6:f2:2d:b3:ba:f8:c8:ab:06:33:bb:0e:ba:b7:
                    67:af:d6:a9:db:bd:3f:25:8d:dc:33:e9:33:cc:55:
                    f9:64:d4:e8:db:6e:6a:87:a7:e5:1e:9a:e8:e8:e9:
                    27:bd:76:33:36:dd:9d:31:aa:45:9a:0b:ed:c8:50:
                    f3:44:64:bc:f3:6a:79:0b:2b:59:e8:05:6e:37:b1:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:E8:2F:7F:16:65:1A:54:1B:A6:62:6D:05:20:56:F8:55:7E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:9e:74:cf:71:dd:da:26:e4:bb:3d:ef:c3:3a:c6:be:97:
         2f:8a:d7:30:18:ab:1c:1a:0f:63:5e:d7:1e:ea:74:7d:c0:8b:
         36:2f:12:6a:83:a5:4c:23:b9:cf:37:55:13:f9:11:b9:d1:df:
         13:c1:9a:fd:65:4a:95:c5:ae:28:b6:4b:11:9d:51:aa:f3:bd:
         fa:f4:fe:e5:fa:d9:25:16:21:e4:9f:b6:d1:65:ad:bc:34:8e:
         ec:6f:d9:95:8a:8a:42:a2:7d:65:43:00:d6:21:2a:b4:9a:d2:
         81:a1:f2:05:6f:a1:81:51:c4:c7:51:1a:f7:bf:d0:2b:47:6a:
         0f:c1:ea:29:94:80:5e:54:7c:4e:75:e1:7c:1d:fd:d5:c2:42:
         7a:d5:d7:f4:aa:d7:9c:44:ac:5b:83:67:7e:20:a6:28:2e:b7:
         44:14:73:32:62:5e:7d:ee:1f:1f:b2:4f:24:92:2a:a0:71:a1:
         f8:d0:36:01:19:ca:cc:21:61:a4:a8:2e:8b:06:18:e1:2f:83:
         ae:da:54:a8:19:89:e4:46:4b:d8:0a:e5:42:6c:02:fd:d2:5e:
         a3:67:e7:28:6b:e1:ee:3b:a1:91:8d:7c:c4:c1:e7:f4:0e:0f:
         b5:b8:e9:0c:8d:ec:6e:35:55:0e:de:65:bf:46:89:d3:a2:af:
         ef:3c:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:52:30 2024 by rpki-client on console-ams.rpki-client.org