Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa
File:                     3f64edf7-dafc-372e-8fce-91bd2f909203.roa (raw, json)
Hash identifier:          Vcbr0P2BeHhWA8Zk/KhQGPxHA9LJWotWKFNpIaYErSQ=
Subject key identifier:   98:16:43:6A:48:4E:1C:06:E5:11:FF:4D:E4:5B:54:17:D1:FE:AC:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDBE2957CAF264CBC9480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        174.162.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:db:e2:95:7c:af:26:4c:bc:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=69d102cb-7561-4f65-982b-4e49f6b12074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:ae:f1:55:d5:eb:6d:60:01:73:ec:12:8a:
                    7a:f8:da:fb:8e:5f:51:9f:57:0f:d6:fe:69:db:d0:
                    1c:17:17:34:ad:81:ab:5c:e4:67:fc:b9:eb:66:87:
                    22:71:22:53:c2:dd:96:43:fe:11:43:91:a4:1e:2d:
                    a4:7b:cb:e2:47:91:1c:5b:45:34:d1:97:03:a3:a5:
                    73:f5:b7:a2:4d:45:43:aa:84:31:e3:7a:e6:7b:a9:
                    ec:0d:2b:92:03:78:26:69:df:15:80:4b:c0:05:a2:
                    b7:e6:6e:50:8f:2c:7a:4e:20:f2:35:c5:09:2a:aa:
                    44:4f:40:44:2e:c6:d4:95:fd:94:2b:38:e5:dd:c7:
                    58:30:fe:2f:40:0c:b6:30:fc:f2:b4:fb:79:50:83:
                    1d:01:4d:2b:7f:aa:5b:54:b7:9d:62:6d:4e:02:eb:
                    45:51:92:15:67:fa:fd:2c:be:bb:3c:6c:f8:40:9a:
                    b9:c9:5f:bc:e8:c7:90:f7:1b:f0:25:a6:6a:d0:06:
                    dc:3d:50:d5:8c:76:10:ef:30:f6:62:11:25:60:1e:
                    85:41:f3:da:de:b1:f6:a4:c4:25:f8:cb:a3:ed:b9:
                    ac:3f:93:f0:36:61:56:c8:d0:eb:bf:99:b3:c2:25:
                    f5:6d:2b:98:4e:5c:cd:52:ab:cb:e9:ec:d4:a8:99:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:43:6A:48:4E:1C:06:E5:11:FF:4D:E4:5B:54:17:D1:FE:AC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3c:7b:c0:79:a2:3d:81:e0:d9:8a:88:d0:b7:53:22:41:0c:
         13:dc:de:88:d3:7a:3e:78:00:32:69:2e:fa:6a:c7:31:01:51:
         24:b4:c0:55:5d:72:a3:78:5b:db:55:07:d9:7e:93:6a:87:4a:
         dd:6a:8d:af:69:40:70:dd:df:55:da:3e:00:0a:19:2d:7e:cf:
         1a:35:e5:b5:45:d2:e9:2a:b5:e5:7c:42:b5:5d:3f:1a:d6:d7:
         96:fb:fe:7f:e0:96:c3:5c:79:69:ec:a3:45:75:47:2c:40:5e:
         56:65:96:47:c4:b0:7f:a2:96:a1:8f:c5:d4:72:d7:7f:4c:07:
         4c:1f:28:ec:f1:68:3b:54:3c:b9:74:79:6b:4a:28:ef:24:42:
         09:31:51:e5:12:14:99:0b:26:74:a8:aa:59:eb:5a:79:01:b1:
         21:aa:81:f1:42:bf:47:7f:99:d1:a7:9e:fc:27:af:d6:e4:22:
         9c:68:c5:33:bb:19:10:d8:77:7e:70:8e:ce:e0:69:43:af:51:
         1b:77:ba:06:c8:e2:fb:3a:a7:ff:f3:c0:a8:37:08:8e:fe:e4:
         5c:a9:f6:61:4c:59:c5:d5:0f:d8:bd:af:6c:38:d8:97:4a:4e:
         a3:17:23:8e:e5:0b:52:6d:e7:c0:e1:6e:75:09:72:f7:50:48:
         d2:c5:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:34:11 2024 by rpki-client on console-fra.rpki-client.org