Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2567248a-672e-3f4f-8381-9dddcbbd29b3.roa
File:                     2567248a-672e-3f4f-8381-9dddcbbd29b3.roa (raw, json)
Hash identifier:          wk9AcTCRuK1eTlo/yf8X3EbiUr0IDgPRzYjxRL2lht4=
Subject key identifier:   BD:7B:F8:EF:B6:4B:78:10:AB:2C:0F:93:29:81:03:A4:7D:5F:47:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB519510A8A0DB58275400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2567248a-672e-3f4f-8381-9dddcbbd29b3.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7725
IP address blocks:        71.56.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:51:95:10:a8:a0:db:58:27:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=b7625b2b-b5e6-4285-b996-5c47eaac3446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:fb:b0:56:97:2c:99:17:f6:fc:4c:ef:bc:
                    0b:76:e5:ce:a5:4b:0b:c6:a3:dd:84:61:1f:71:95:
                    ff:23:e6:fe:80:ea:cc:d4:e2:85:34:79:22:9e:f8:
                    2a:1c:f1:3b:53:72:19:c7:34:b6:65:d5:a0:ce:ba:
                    91:a5:aa:b6:03:6a:82:95:25:19:e8:6e:24:54:01:
                    55:c0:62:f7:75:fe:05:10:02:a5:2b:fc:44:0f:ad:
                    ee:5a:a9:05:74:15:79:dc:f1:96:33:eb:d9:3c:8d:
                    8b:d2:3e:29:8e:19:c1:80:c4:1f:c6:3f:d6:17:52:
                    f6:ec:7d:e4:cc:43:87:0f:1d:65:a1:2c:8b:62:1c:
                    b4:4c:1f:ac:bc:97:35:f9:ca:2b:92:57:52:e6:a1:
                    95:c0:0f:38:98:19:00:f1:65:ed:e1:f5:fa:ed:6e:
                    81:78:c1:9e:10:61:5e:61:34:46:f1:5f:22:f6:73:
                    f7:78:bc:7d:1d:bc:cc:55:68:e3:35:a0:bf:6e:c8:
                    87:9f:08:42:b1:c5:91:d2:33:04:d9:e6:15:57:a4:
                    6d:64:de:4a:15:0b:ba:f8:54:c7:ac:fd:78:2e:6c:
                    43:b9:3a:89:40:07:c2:0b:54:1c:bb:1e:cd:31:98:
                    5f:d5:16:06:88:65:21:ed:8d:b8:9d:eb:48:c1:ea:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:F8:EF:B6:4B:78:10:AB:2C:0F:93:29:81:03:A4:7D:5F:47:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2567248a-672e-3f4f-8381-9dddcbbd29b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:ec:00:44:63:7d:24:bc:6f:ef:7f:7b:62:01:e0:ab:8d:
         bb:77:14:4c:db:e2:87:b7:3e:2e:c0:b7:f4:11:4f:77:7d:28:
         df:32:10:8f:fb:b4:5c:88:65:f6:86:49:1e:dc:a1:b2:de:2b:
         87:1c:bd:ae:e4:56:a3:fa:87:44:c7:8f:4c:b0:9e:75:8d:6a:
         3f:84:eb:63:fd:b9:12:cd:2f:e7:2e:05:c5:31:29:d8:57:a6:
         f5:2a:29:be:fa:7e:72:65:1d:e4:b9:27:00:3b:0b:0a:ea:89:
         11:72:db:86:8f:99:65:a8:c6:38:09:75:b0:49:31:2d:d9:23:
         90:ad:45:2c:b4:32:c4:e6:89:8b:12:51:51:2c:f3:95:15:d3:
         ee:72:3a:de:eb:2f:f3:50:3c:ce:21:75:c2:76:a8:ef:95:b5:
         44:bc:af:9b:58:89:65:d9:aa:00:73:42:2b:23:70:7f:9d:bc:
         40:62:f3:0b:f8:7c:bb:57:28:fe:cc:1c:bb:2d:ee:6e:57:d9:
         7c:4b:ae:30:04:1a:64:9a:66:f5:25:2f:00:88:2c:57:74:bc:
         15:70:d2:6a:74:a9:e1:64:62:a2:b2:29:a4:59:fd:95:45:2e:
         5b:c8:99:e9:a7:94:38:9c:29:3b:28:3f:92:90:5e:11:d8:36:
         40:41:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:14:54 2024 by rpki-client on console-ams.rpki-client.org