Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/184ec665-6cdf-3ad6-b822-5283272320e4.roa
File:                     184ec665-6cdf-3ad6-b822-5283272320e4.roa (raw, json)
Hash identifier:          1lm7H82MjEj8vVnu54p84WHMyZm3IOOuS2VGLfJHbsA=
Subject key identifier:   21:22:1A:BF:9D:D5:E1:0C:B9:77:18:D4:80:70:B2:D7:04:18:3F:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7A0D968B062439B168300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/184ec665-6cdf-3ad6-b822-5283272320e4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        71.234.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:a0:d9:68:b0:62:43:9b:16:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5df3fb77-cc86-4371-a971-8409fe243f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:08:d8:3d:ca:ef:6f:28:50:2d:92:51:ed:
                    a4:a1:85:e8:70:d5:d7:75:bc:64:16:90:de:05:7d:
                    69:fa:db:13:b3:c9:13:68:8d:88:6c:5a:6b:13:d3:
                    5c:9f:ee:4c:06:3f:c2:0b:fb:9c:27:a9:bb:15:d7:
                    e9:ad:39:33:36:7c:f1:27:44:16:fa:b6:02:72:f2:
                    00:d9:00:8b:33:b0:2d:b0:49:4e:4c:70:5c:3d:d9:
                    a4:ae:65:98:cb:26:6a:9c:b7:1c:d0:60:a2:da:d2:
                    5f:99:1b:e2:66:5b:8c:93:6b:10:0a:04:66:0d:7a:
                    19:d4:a0:63:c2:cb:a2:17:2e:5f:a5:f1:e4:df:cf:
                    39:62:b4:38:4d:b0:dd:ba:4a:e7:c6:d8:55:4a:96:
                    86:e2:f4:a5:7c:5b:95:a5:eb:60:a7:d5:45:56:d3:
                    67:13:48:39:d5:be:7d:33:ec:0c:9e:e0:d2:7f:e2:
                    b2:7b:08:da:3f:b9:3c:c7:45:84:75:f8:44:dd:52:
                    bb:0a:7d:59:a7:66:e1:28:c1:c7:ba:93:09:49:57:
                    5a:c7:5a:89:04:49:9f:da:3d:ac:f0:f4:69:40:0e:
                    65:80:bb:e5:0e:88:96:36:88:29:6d:34:04:2a:5c:
                    1b:88:19:ad:71:d9:54:93:98:bd:ba:df:e3:de:47:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:1A:BF:9D:D5:E1:0C:B9:77:18:D4:80:70:B2:D7:04:18:3F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/184ec665-6cdf-3ad6-b822-5283272320e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:50:72:b6:a2:9e:a5:17:6a:7e:62:e0:44:53:dd:4c:4b:1e:
         3b:ea:31:a7:63:df:5a:98:de:ae:09:fd:f3:a7:05:57:ad:06:
         e9:17:7e:aa:d2:d1:ae:37:7a:e8:17:3e:97:30:2f:5d:ba:a2:
         4a:82:ba:94:32:f6:f2:5f:a2:a8:9f:c5:be:e5:7e:cd:d9:22:
         5a:48:6c:57:e7:70:3f:f4:59:4a:20:65:7b:da:c0:5f:94:dd:
         d9:76:11:b9:73:e8:0c:46:e8:dc:6a:7b:4f:0d:f5:c7:10:d6:
         6d:4d:af:f4:61:34:54:5b:d8:32:86:4c:56:24:a7:23:ed:44:
         82:63:b6:84:f3:c3:9a:03:cb:dd:25:b7:cc:7d:cb:c1:24:10:
         68:b6:87:58:cc:bc:39:37:d7:6a:56:3c:04:83:2d:9a:9d:ce:
         6d:a6:10:ae:53:46:53:5d:c4:0f:58:1b:7c:e6:36:6d:e1:74:
         81:e4:2c:dd:38:3c:25:79:e8:22:5b:58:0d:af:c4:06:bb:47:
         8f:17:9d:39:a5:39:49:36:86:57:37:e4:13:82:d9:0d:c9:6b:
         2f:12:3a:ed:9d:c3:cf:cd:88:3f:47:fb:0e:9d:a4:20:72:3f:
         9a:76:5f:a4:3d:aa:d8:ee:f4:f2:2a:db:ab:e2:8f:6c:fd:7b:
         21:82:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:54:53 2024 by rpki-client on console-ams.rpki-client.org