Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa
File:                     3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa (raw, json)
Hash identifier:          w5wBzMzbHOO5XI19DqyOk06ebnsK4AW97zhl4Ajs7S0=
Subject key identifier:   32:0F:34:1E:FE:47:AA:2E:F7:6B:C3:3C:82:30:C6:D2:76:38:FB:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C0047C6EE52B631CEC280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        71.57.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:00:47:c6:ee:52:b6:31:ce:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=25b058b2-a84f-4ce3-9ecd-e85470379e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:61:38:1d:ac:69:4f:82:23:e5:d6:28:d5:
                    d9:4e:f2:d9:30:0c:d0:a1:c8:d7:76:31:51:b6:fd:
                    13:93:b7:65:01:e6:44:f3:0e:a3:ae:b7:fb:44:c4:
                    1f:6f:76:5c:fe:c5:aa:06:f5:b3:07:be:e4:88:92:
                    eb:62:e2:50:04:86:3a:a7:16:b3:7d:7f:69:26:08:
                    88:c4:3c:a6:66:0f:39:a0:75:e4:fe:b2:5e:35:47:
                    0f:e1:1c:6a:09:5c:59:99:63:20:2e:34:86:57:ab:
                    30:32:8b:95:39:9a:48:58:cc:f3:6d:e4:f1:56:ee:
                    ba:f0:39:b2:7b:f1:02:67:00:82:ca:bc:3d:e6:a0:
                    b0:7d:c9:bf:be:b2:9c:08:7b:84:c4:3c:5e:70:20:
                    2e:03:e4:78:0d:5b:00:56:96:2a:65:8b:fb:70:00:
                    de:15:8e:90:04:cb:7a:9a:a5:fb:ef:e3:97:a1:e8:
                    6a:c3:12:08:4a:64:97:43:a1:c0:91:c1:f9:93:fb:
                    df:45:fc:ca:1c:c4:83:a6:14:a1:e2:28:57:af:40:
                    73:4a:bf:3a:16:9d:58:05:06:f4:67:6b:f2:7f:5b:
                    f8:39:98:33:db:6d:29:50:8a:02:c7:d5:e2:f9:3a:
                    c5:a3:58:8f:8d:7c:52:89:a1:1a:39:3a:94:57:45:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:34:1E:FE:47:AA:2E:F7:6B:C3:3C:82:30:C6:D2:76:38:FB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:66:2a:1d:a4:22:cb:7a:85:b2:bd:96:a6:b1:34:ed:0a:
         91:c0:29:1f:73:fc:b7:73:1a:d0:c8:8a:e4:30:84:28:78:44:
         55:5c:bf:c3:9c:0e:8e:be:9d:58:7d:ab:da:e1:74:25:5d:98:
         9b:c0:6d:99:df:95:d3:7f:23:04:5a:2e:10:bb:72:f1:03:a2:
         77:f7:35:1f:2d:99:6c:53:39:ad:2a:17:ff:bd:7f:62:ed:5e:
         e4:45:b5:8e:bb:7f:57:4e:03:c6:37:37:a1:d3:30:ab:c9:b6:
         e3:56:92:a1:93:60:b3:41:99:a8:da:a2:5b:bf:0b:60:ca:ba:
         5c:59:a7:30:2d:9a:cf:17:79:6e:ca:71:5b:0f:5a:1c:48:ea:
         a3:e3:95:0c:d4:e6:b4:88:4a:bd:cb:a9:b8:94:a4:9c:82:3e:
         9a:bf:1c:40:a8:ee:38:46:d7:98:72:6d:81:ed:f6:74:b0:93:
         b7:48:1a:6a:ac:ce:0e:54:a2:cf:14:c0:e2:55:c9:a6:a4:b3:
         70:1e:a4:22:4c:c2:73:ca:1a:30:e3:c9:b5:fe:4a:53:7e:7c:
         c5:25:d5:61:ab:78:50:cf:e9:19:07:be:1c:fd:a0:57:c4:43:
         f1:06:3f:1f:f9:c6:d7:7e:6a:a3:62:3f:9b:a2:cd:6a:be:52:
         31:f8:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:17:21 2024 by rpki-client on console-ams.rpki-client.org