Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa
File:                     1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa (raw, json)
Hash identifier:          lR8hVOagUJqgNaKyzMUia6/iHv9zwYLDw6yNRP0wn4Q=
Subject key identifier:   AC:BC:79:89:38:20:CD:AC:C9:B8:E9:DE:8A:81:CC:ED:6C:BA:1C:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D051E1F4ED8384D75C238
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.161.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:05:1e:1f:4e:d8:38:4d:75:c2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=5c793607-af87-4cac-b7ee-1258545aea3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:c5:1e:b0:7f:a2:c2:bc:aa:fe:18:8a:ee:
                    2a:bc:87:8b:43:18:cb:5a:a6:13:8a:fe:36:b4:11:
                    39:7f:ed:c5:0c:ba:d3:7b:26:9e:8d:1c:c5:70:ae:
                    83:d4:52:68:e7:59:7b:f2:a7:01:ee:d0:22:95:6d:
                    65:13:7c:ec:7d:da:fd:11:de:89:f2:5d:c0:cb:b5:
                    1c:7c:d1:a0:58:c1:5c:6b:23:c7:f5:d6:a5:b6:c6:
                    da:1c:8c:56:82:be:cf:26:b0:1e:fb:67:9f:42:a7:
                    27:82:62:a3:2e:3f:b2:b3:89:b4:65:84:13:a1:7d:
                    8f:d7:11:43:7a:5a:f7:c9:fa:d7:32:8d:13:79:1f:
                    2f:04:cb:a6:5d:cb:8e:2f:79:fb:2a:5a:83:75:22:
                    ad:ab:5d:20:14:85:45:09:fe:e5:6c:ba:df:3d:56:
                    be:49:4e:2e:e3:34:ec:1a:6b:b2:98:56:ec:e1:a4:
                    2f:b3:dc:e4:24:b0:85:e0:e9:c1:b0:31:bd:04:f7:
                    fe:c6:f2:e1:8f:5a:5a:ad:fe:16:ee:53:25:9f:19:
                    ca:63:af:ec:4b:ca:a9:40:ba:83:ff:8b:7c:d2:4f:
                    ff:18:61:e2:bf:de:d1:48:6d:29:34:3a:e5:95:08:
                    63:25:af:36:c9:ac:04:ec:88:4f:a7:3a:71:e7:2d:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:79:89:38:20:CD:AC:C9:B8:E9:DE:8A:81:CC:ED:6C:BA:1C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.161.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:8b:d8:27:d5:31:a9:d1:8e:ac:62:12:7c:e7:27:95:e6:7c:
         f6:ac:55:9b:f9:48:61:52:db:9d:9e:ca:75:1d:c7:56:09:5f:
         8a:57:67:45:0e:0f:17:d9:07:8d:80:31:92:58:bf:36:92:4b:
         7d:b5:fb:cd:13:ba:10:3a:09:f6:7a:bd:cc:3e:fb:8a:7f:e0:
         96:58:c7:12:37:1f:8d:53:fd:bd:d5:7b:c1:f4:ef:c7:eb:04:
         cb:d7:15:44:f1:e6:42:10:d5:0d:5d:12:c6:82:ae:b7:c9:5c:
         81:8a:32:24:d3:8e:a6:75:82:44:ed:19:94:ce:b5:e2:83:e7:
         a2:02:aa:c5:fa:49:25:f8:96:4d:0d:06:66:fb:e3:65:32:c2:
         f1:cd:26:b6:18:e8:58:1c:02:c9:2a:66:c9:98:82:ce:43:15:
         51:3b:b4:d0:0d:83:52:bb:84:a2:07:1c:a2:10:3f:88:34:0f:
         d0:2f:47:ec:84:19:89:77:0c:03:a9:49:aa:98:ae:69:96:0f:
         72:ff:b2:c9:44:d5:df:0c:79:4c:6b:05:a5:4a:6e:72:a9:e2:
         8d:5f:13:1e:8f:69:d2:08:ef:7a:ab:8a:21:36:aa:9f:b5:14:
         53:8d:43:81:76:08:06:39:07:ef:a0:ab:ec:f3:e4:33:62:76:
         60:a6:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:45 2024 by rpki-client on console-ams.rpki-client.org