Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa
File:                     3b724d06-8255-3d5b-a136-50959a82b844.roa (raw, json)
Hash identifier:          mIx7srRKJ2KM6p+AvwoZwd8qWsjcc9ZUTN7jAYjsVaI=
Subject key identifier:   90:C8:82:ED:13:A3:2C:36:44:51:76:1E:6F:F8:51:CF:D3:9B:B0:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EB73A7C2BF953064ED2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        69.139.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:b7:3a:7c:2b:f9:53:06:4e:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=58c56f21-2684-4ec6-b327-d31451ba5165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:78:e4:9a:34:ed:04:ca:d2:43:d0:a6:dc:
                    c7:d2:4c:f8:c7:8f:db:78:a4:99:dd:49:5e:6b:a3:
                    34:a5:e7:2d:87:0e:a2:70:2b:73:44:94:32:bb:00:
                    47:75:eb:4a:1e:8a:79:53:4c:3f:c2:97:6a:5f:27:
                    21:58:4e:f7:d3:91:d8:e1:c0:ed:3d:40:5c:78:54:
                    0f:4e:20:50:e9:47:bd:95:c5:8a:30:90:b6:00:f8:
                    5f:a7:9e:41:1b:3c:f7:a9:7e:f5:14:8a:b9:01:fd:
                    46:74:a7:8e:ae:06:f9:92:fa:8c:37:ae:b0:fa:16:
                    6f:4e:81:66:be:1e:b9:12:5b:db:bb:75:a2:13:61:
                    88:3f:46:00:da:a6:99:6e:31:ff:da:b3:c2:68:bf:
                    30:83:de:a1:16:ed:65:fb:b2:54:ae:99:bb:c2:91:
                    86:a4:5a:27:0d:9a:8c:e1:ae:57:e2:1f:70:b0:a0:
                    43:ee:d6:d8:25:26:96:3d:31:34:f1:b9:72:91:d3:
                    61:3d:b0:a0:8a:32:ae:18:29:75:be:41:73:9f:22:
                    3d:52:04:58:e7:7a:d6:62:9e:f6:f5:2e:f7:4f:d1:
                    ff:51:25:53:04:fd:b9:e9:10:c8:53:52:e2:ad:41:
                    92:28:d8:9d:0a:d9:56:7d:cf:09:db:c5:c3:5c:a3:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:82:ED:13:A3:2C:36:44:51:76:1E:6F:F8:51:CF:D3:9B:B0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:28:c5:3b:7a:ad:2d:9e:16:25:81:40:10:70:14:bf:a9:a0:
         3c:85:f4:83:5e:bb:54:d7:f3:ba:8d:ea:ed:8f:c9:c8:14:85:
         26:3a:e9:f4:1c:c9:05:59:dd:85:10:3d:ad:2b:da:5f:17:3f:
         05:cb:0e:e9:4e:e9:ea:c0:9c:bc:10:94:53:09:92:7f:6a:6f:
         e1:3a:49:42:d7:f5:97:cb:ca:d7:3d:3c:43:a8:82:55:dd:a7:
         3a:80:4a:30:7e:e5:f9:a4:20:3e:3d:0c:07:8f:76:59:32:22:
         82:e0:d9:13:a9:aa:f5:09:8e:35:0a:52:4f:a3:10:78:48:a7:
         6c:2b:0f:56:e2:92:a3:b2:c9:05:32:dc:26:f8:d9:b4:86:38:
         f9:1b:7f:e4:2c:62:65:ca:49:c0:68:2e:93:3f:22:20:0f:18:
         11:c4:03:93:fd:6b:cd:6e:de:f6:d7:9e:d0:9c:86:56:d0:3b:
         55:52:1d:d7:4e:1d:ca:34:e3:ab:93:c6:c2:6b:66:f4:b3:87:
         61:0e:e5:b1:85:62:26:fb:d1:f8:f8:83:bf:7c:51:b2:a5:7e:
         81:39:1d:e5:97:45:4e:ec:6b:c9:d4:c6:3d:bd:9f:ea:d2:61:
         1e:fa:5c:d0:35:c7:88:a9:0f:db:68:91:5c:ca:1d:ad:97:e5:
         5d:7e:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:48 2024 by rpki-client on console-fra.rpki-client.org