Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f88c2-af63-387c-9898-7c2019a43d76.roa
File:                     241f88c2-af63-387c-9898-7c2019a43d76.roa (raw, json)
Hash identifier:          xWmLfP7Y74A0UdE5YFGa+MSOx1bqqu/dl/OnXYuaSP8=
Subject key identifier:   F1:05:8C:BC:C8:B6:A9:F4:67:EC:88:99:75:93:C4:12:DD:B5:D4:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7D1389944EF11C4E4D700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f88c2-af63-387c-9898-7c2019a43d76.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        107.4.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:d1:38:99:44:ef:11:c4:e4:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=cb158372-2372-4c94-942e-9d71415fc8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c6:1b:c9:5b:86:83:51:34:ed:a6:07:d0:6b:
                    01:a5:b1:4f:1e:1a:2a:9f:7a:54:1d:48:59:12:40:
                    8b:53:63:e6:61:98:f5:6f:a4:39:7d:8f:04:c6:e7:
                    1a:3a:2c:b0:73:f3:b5:0f:df:6a:d4:9c:9d:dc:b2:
                    91:6e:08:18:08:cb:eb:31:f6:f6:bd:77:f6:88:84:
                    72:ed:07:7b:c6:cf:17:ed:59:9e:39:da:19:29:21:
                    cc:90:fc:ce:ad:ae:16:ed:8d:08:d9:91:16:79:30:
                    ee:83:0c:89:d9:6a:18:b8:83:0e:28:06:0d:ee:3f:
                    8e:9c:b6:82:d5:81:4c:da:96:94:25:f8:8d:91:2c:
                    74:dc:d1:fc:00:16:d6:14:74:df:0a:81:36:2f:15:
                    c4:fe:5e:0d:7a:89:bf:43:82:a1:72:a6:4c:f5:1d:
                    d7:3a:84:91:50:6c:1f:63:b1:08:71:37:a1:95:e1:
                    2d:e1:fb:c7:16:f2:3d:c5:f5:d0:7d:01:57:cf:27:
                    67:2d:0b:38:3e:50:a5:ab:e9:45:c5:13:76:07:8c:
                    ff:27:6d:e4:d1:46:f7:d6:50:92:99:81:c7:d3:8b:
                    f4:34:49:94:b7:a3:70:c4:f9:5c:c3:8b:eb:eb:fc:
                    d2:18:b3:45:24:f8:86:25:eb:96:06:be:5e:43:5b:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:8C:BC:C8:B6:A9:F4:67:EC:88:99:75:93:C4:12:DD:B5:D4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f88c2-af63-387c-9898-7c2019a43d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:69:e0:08:0d:72:ea:21:8a:90:ba:23:44:a9:4d:fb:b5:f3:
         26:d6:c7:30:f8:fb:57:71:01:1f:29:80:41:4d:08:af:28:34:
         7c:b7:3a:7b:39:69:75:bd:9b:82:53:5b:d0:d8:23:11:e7:17:
         5f:e1:b2:b3:8e:28:5c:b3:01:90:34:f7:51:c1:97:c3:ec:2d:
         0a:7c:a5:94:8c:5f:39:45:84:3b:76:4c:3e:f2:6f:df:10:c9:
         50:30:1d:c7:05:83:2c:3c:e8:e5:25:f3:b2:a9:f6:42:dd:fd:
         cc:7c:de:b8:ce:f2:de:8c:11:f4:cb:af:3c:7b:71:d8:e2:68:
         19:00:09:05:72:b8:c4:81:17:2a:90:c5:73:89:71:ee:2f:04:
         eb:a4:c6:58:a9:38:2e:5b:38:7b:c0:01:32:f0:48:16:86:29:
         5c:75:00:e8:9e:82:cf:17:cc:3b:61:e8:29:38:2c:b9:ce:6a:
         5d:73:d8:3f:e5:90:35:74:4a:65:21:60:9f:ba:a7:fe:96:87:
         ff:3f:10:d7:b9:29:62:32:40:35:eb:7f:da:33:d3:5e:0e:32:
         88:fe:a3:26:85:51:1b:70:f8:dc:e1:8d:9c:60:0b:46:7f:7b:
         c7:7b:5e:42:1a:24:65:99:e9:37:85:d7:b5:2e:4c:ca:01:1b:
         37:45:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:02:56 2024 by rpki-client on console-fra.rpki-client.org