Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/191c92a4-8ea8-32c9-b399-2ac17ff70c5f.roa
File:                     191c92a4-8ea8-32c9-b399-2ac17ff70c5f.roa (raw, json)
Hash identifier:          x0GLJAmGCz3RojsPEEU6Yw5nrGl+80H685hVW7g0TfI=
Subject key identifier:   1D:47:B7:A8:D0:CB:99:D1:A7:63:B0:AD:54:59:09:B6:96:8B:2F:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6092CE65858263DE15200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/191c92a4-8ea8-32c9-b399-2ac17ff70c5f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        71.63.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:09:2c:e6:58:58:26:3d:e1:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=9cb38aea-53fa-49d4-85b0-d63ce80adcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:cf:ee:e7:d9:b5:e5:d4:f8:16:fe:7d:83:
                    03:ca:03:b8:21:5b:13:d2:18:71:51:01:d2:46:74:
                    66:3b:aa:a3:06:a6:ec:79:5d:0c:62:c7:c8:19:df:
                    b4:19:c9:04:2f:59:40:8e:f5:96:cf:a8:ca:9d:66:
                    5a:8d:d3:cc:f7:ed:30:e7:ed:10:0b:10:72:f1:5e:
                    ca:c2:3f:41:9f:2a:1b:07:c7:ee:7c:71:41:e9:46:
                    1f:0e:d7:e2:25:65:cd:3c:0e:64:a9:9a:e5:72:85:
                    39:ef:64:92:17:ce:0b:af:da:e6:1d:c0:24:55:f3:
                    42:7f:76:a0:cf:01:0b:4e:b3:d0:a7:bc:2f:cd:d2:
                    4c:d7:b2:20:c5:0e:ad:66:d2:69:de:ad:c1:a2:13:
                    bb:35:b5:d8:37:dd:c7:ef:3e:a9:45:fa:5d:3e:c3:
                    01:ff:30:27:da:38:8b:da:4b:72:16:33:9f:7a:73:
                    59:ef:47:e3:90:0c:43:7c:a0:c5:ae:19:73:14:6d:
                    16:b6:54:56:4c:25:46:74:cb:15:2a:17:a0:b2:4f:
                    39:79:97:ec:3d:c5:47:92:5b:73:21:e7:54:ea:d8:
                    95:c1:e1:8b:00:24:97:95:73:3b:2f:12:b0:72:3a:
                    92:29:1b:13:ab:eb:aa:0a:5c:b8:34:78:f8:e8:b5:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:47:B7:A8:D0:CB:99:D1:A7:63:B0:AD:54:59:09:B6:96:8B:2F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/191c92a4-8ea8-32c9-b399-2ac17ff70c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:3a:03:4e:5f:93:1a:dd:4b:85:57:7b:fd:10:e7:55:71:
         4f:09:13:66:1a:bb:90:e9:87:7a:e4:22:e4:cb:0f:47:7d:62:
         42:9d:43:14:49:d9:63:7e:2f:1c:ef:70:7a:45:02:bc:06:25:
         e4:17:c8:aa:d4:f8:cb:d0:a7:19:05:02:24:00:7c:2e:a0:1e:
         a8:0b:4c:0c:d4:91:31:d7:27:30:e4:2c:3e:de:61:d3:82:f1:
         28:1c:b1:2a:35:17:61:39:eb:8c:6f:a8:49:58:5b:83:39:61:
         a3:48:9c:9b:e6:99:e7:61:b1:fe:c6:2a:13:d6:f3:8b:0a:6a:
         e4:e7:03:e3:88:6a:3e:e6:97:13:cd:b1:8b:c7:98:f2:ee:0e:
         2b:15:f0:68:f6:60:a0:60:f1:f2:78:a7:b7:5c:95:b7:7d:2b:
         26:48:f6:58:48:82:36:e5:b9:a8:da:9a:bf:96:ee:ec:6d:0e:
         27:56:a6:3f:77:71:96:d1:9e:f1:41:84:6b:c4:41:88:98:3d:
         b5:3f:6b:02:a0:de:d2:16:9e:b0:99:25:80:e8:0e:07:ed:84:
         1a:e6:a5:fc:ff:ae:2b:ff:2c:9b:00:3d:ce:5c:1c:69:cb:2d:
         eb:93:de:79:c2:a2:6b:30:82:43:d7:40:05:e5:49:83:0f:bf:
         1b:96:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:19:57 2024 by rpki-client on console-fra.rpki-client.org