Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b12e60b-a905-3969-9aef-e77988c26fe2.roa
File:                     2b12e60b-a905-3969-9aef-e77988c26fe2.roa (raw, json)
Hash identifier:          7UjxaUsop7aoKgLI9rnLvnLexO/BbDR6Y0JiS2QXDe4=
Subject key identifier:   CB:41:91:A5:7A:ED:5C:AE:64:CD:0F:6E:9A:E8:47:A9:6A:40:73:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7EC94D2D7657102378380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b12e60b-a905-3969-9aef-e77988c26fe2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        174.171.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:ec:94:d2:d7:65:71:02:37:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2dea1ef4-4f6c-488f-96eb-340264472b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:10:b3:cf:89:58:56:a4:7c:2c:b5:74:53:
                    eb:22:4e:fa:a0:71:a1:bd:1c:25:aa:1e:15:fd:a6:
                    e9:94:b9:3b:08:55:5f:69:7b:33:55:0f:63:c2:c5:
                    27:5d:ca:d2:94:e1:42:df:6b:9b:33:0f:26:25:32:
                    2a:45:98:57:6d:da:04:df:96:e5:c7:da:c7:00:90:
                    22:41:68:9c:dd:37:ca:7b:d1:77:8e:81:3e:f4:35:
                    d8:e3:70:46:d6:99:68:46:60:1d:8c:ff:31:b6:23:
                    76:ce:c2:1d:98:5c:a7:60:a6:ee:5b:0d:91:46:e6:
                    f0:b6:f0:22:d9:0c:2a:b0:5a:63:3d:1d:98:e7:de:
                    a6:35:4c:2c:da:a5:43:c9:dd:e3:9d:9f:25:ae:02:
                    44:f8:c1:b1:6c:2a:44:4b:ab:dd:0b:3c:55:5d:cd:
                    a4:be:52:9a:46:3f:e1:23:72:82:c9:7c:74:a2:9d:
                    cc:2d:d5:91:1c:4d:ad:f2:d9:66:de:d9:70:be:23:
                    b0:64:4a:ff:63:7d:1b:b5:11:4e:04:18:c4:e8:ae:
                    1a:47:f4:65:a1:47:72:7d:7c:9a:8d:10:c8:d4:bd:
                    9e:0d:0d:da:5b:a5:35:b0:d8:10:70:c4:30:95:d6:
                    18:85:66:8d:ab:ce:98:6a:c5:1f:32:98:4b:04:79:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:91:A5:7A:ED:5C:AE:64:CD:0F:6E:9A:E8:47:A9:6A:40:73:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b12e60b-a905-3969-9aef-e77988c26fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.171.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:5d:f5:a3:05:d9:74:e6:3a:8d:99:12:f8:b4:78:b6:76:
         55:7a:aa:80:2c:2d:08:3b:7e:ad:3b:4f:1d:f6:d3:4a:c4:2a:
         b2:82:70:6b:20:cf:42:33:e3:b1:a8:43:a0:7c:c3:2b:ef:9e:
         13:29:5f:b3:c2:c7:40:86:49:cf:64:7a:2f:34:eb:af:db:89:
         ce:63:bb:63:24:b5:40:37:6c:96:c2:f6:5f:88:10:15:cb:4f:
         4d:ce:ca:b7:dd:ec:5c:de:9b:06:f1:e5:8d:70:df:da:00:ac:
         fe:79:46:96:7e:e1:fb:3e:35:bd:cd:2e:c7:dd:4c:99:5a:62:
         3b:83:84:d7:c9:fc:bb:98:ce:60:53:af:23:4b:b8:07:0c:63:
         6d:47:9f:e4:92:25:a8:6e:04:13:af:15:09:c7:59:2b:16:b1:
         d5:73:5b:19:2c:5d:f9:29:6c:24:87:a7:71:a6:21:f6:d1:39:
         9e:c0:02:10:54:01:92:0a:1c:cd:35:2c:23:5e:f1:69:ad:ba:
         12:8d:ba:e4:b7:39:33:0a:04:56:77:32:77:6a:97:80:a2:bc:
         8d:e7:0d:54:3e:78:82:d3:8f:32:16:de:04:63:57:e4:62:21:
         1e:f3:7c:ed:ec:07:1d:0c:b6:b5:be:44:89:9a:6e:10:54:59:
         ab:1f:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:32:31 2024 by rpki-client on console-fra.rpki-client.org