Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393cd2d4-ee4c-37de-86e3-8640da5f4ebf.roa
File:                     393cd2d4-ee4c-37de-86e3-8640da5f4ebf.roa (raw, json)
Hash identifier:          IBrjJ16c2crNHAg6nHBg6jzOK3khBeXWFVU95GWwOgA=
Subject key identifier:   62:DD:42:3D:17:2B:3B:BC:FB:87:6A:C3:A4:98:14:A4:9F:F1:53:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF751ADDAABC2364A144C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393cd2d4-ee4c-37de-86e3-8640da5f4ebf.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33489
IP address blocks:        173.165.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:51:ad:da:ab:c2:36:4a:14:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bbd8d088-42a8-45b6-963d-da0eac78cd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:c0:bf:ee:36:06:d1:52:e7:17:46:d3:a7:
                    0f:68:2a:c1:99:9a:4b:51:cb:94:5e:de:12:f3:72:
                    0a:0f:b7:79:78:d5:17:e4:b4:dc:f8:bf:f3:02:4a:
                    23:f9:30:34:2d:43:a5:f2:19:7d:6f:db:eb:ce:be:
                    bd:c4:b7:97:1b:fd:3e:72:f2:03:f0:bb:34:20:96:
                    f7:df:05:0e:f8:45:3d:6a:ac:84:94:fc:10:a6:a6:
                    60:51:b9:6e:91:00:ac:ea:d0:51:34:29:0e:69:12:
                    9f:a6:9e:a6:de:ab:12:51:9b:4b:a4:90:18:c4:22:
                    08:22:62:23:68:2d:0b:c9:bb:87:3e:3d:2d:88:99:
                    52:f8:dc:b8:30:46:fe:33:01:0d:4f:7c:85:64:ca:
                    1a:e3:32:f9:87:5a:c4:c7:a1:fb:af:93:75:5d:ba:
                    f0:45:66:2e:77:15:2f:00:f5:fe:1f:e4:b6:21:f3:
                    a2:5f:60:53:88:89:3b:0f:94:1d:42:5c:fc:e5:47:
                    c2:7c:b5:bd:7b:8c:d6:57:08:98:bd:7a:9d:ee:a1:
                    f3:a0:12:24:eb:9c:74:2e:58:44:d4:4b:10:bd:b0:
                    95:84:80:1b:cb:58:44:73:7d:6c:61:7a:b1:30:73:
                    04:f5:de:57:85:d6:30:d3:1e:ef:80:fb:cc:23:06:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:42:3D:17:2B:3B:BC:FB:87:6A:C3:A4:98:14:A4:9F:F1:53:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393cd2d4-ee4c-37de-86e3-8640da5f4ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.165.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:3c:cb:b0:ca:ec:af:eb:78:2d:2d:6a:44:63:43:97:79:4c:
         09:6f:cf:7d:af:53:4d:6c:2b:c7:7b:87:5d:ed:a7:60:b8:4f:
         14:d4:72:c9:e0:d8:3a:ed:e9:42:16:e6:c1:bf:27:27:60:b1:
         d1:72:4d:58:b9:2c:51:97:7f:33:71:9d:12:ff:bd:60:20:30:
         d6:d2:0c:d2:bd:bb:d5:ec:8f:88:7e:cf:03:de:35:68:e4:a9:
         b1:06:95:67:2d:14:5c:e9:73:18:34:38:c6:e7:2e:0b:ed:e4:
         e8:a0:2a:d8:73:54:50:71:9c:10:d6:ee:87:59:2e:2b:35:cd:
         ae:98:06:59:50:3b:40:3f:77:97:18:bf:b4:92:e6:b9:84:87:
         a2:6a:2c:dd:8b:a9:c0:28:ae:79:ea:a4:8c:a7:51:6b:6b:1e:
         75:4f:04:e2:dd:cd:e7:79:8f:e8:40:95:5b:52:62:ab:80:d3:
         c4:a1:73:f6:b7:52:32:20:e2:e8:f7:17:e1:ec:34:b1:89:9a:
         4a:a8:9b:e9:b2:ab:b4:34:27:8f:19:02:b6:a8:cd:a8:cf:fb:
         68:d8:37:a5:58:ed:78:a9:eb:d7:84:a7:c8:94:78:f2:ad:89:
         92:1c:93:e2:55:47:23:12:3f:f4:af:5a:3d:dc:54:cc:9f:01:
         0f:28:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:06:33 2024 by rpki-client on console-fra.rpki-client.org