Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/417ccfdc-e37f-345c-bf62-aafbc9a8ef09.roa
File:                     417ccfdc-e37f-345c-bf62-aafbc9a8ef09.roa (raw, json)
Hash identifier:          y6JIyfSPY/dMVbneIqOal3efhfH5gHOu2e8xmh6UfN0=
Subject key identifier:   77:2A:C9:DC:0A:70:0C:AD:FD:3D:BA:D8:B4:16:CF:E1:E6:F8:8F:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CEF5C0FD2F35F099E1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/417ccfdc-e37f-345c-bf62-aafbc9a8ef09.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        174.62.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:ef:5c:0f:d2:f3:5f:09:9e:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=276f34cc-4f91-4cc6-a1fd-44fe19026915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:c0:53:5d:f3:cc:69:b4:bf:b4:77:89:78:
                    59:09:2f:48:c2:d5:50:bf:5d:7e:e5:bb:98:9d:2a:
                    92:47:7f:35:60:44:06:e3:e7:e4:1d:2f:6a:43:d5:
                    a6:ff:35:20:3e:a4:de:f3:cb:0e:a2:92:8b:82:0f:
                    4d:9f:9d:61:4e:e1:0f:d3:bd:46:04:0a:b4:fc:a7:
                    62:e8:83:fc:91:7e:65:af:29:e3:43:81:ee:9a:fc:
                    5b:67:f5:2f:5a:40:56:e9:c6:14:4c:9b:24:e9:fe:
                    68:6e:6b:68:55:0d:d0:62:b9:18:7e:91:52:f1:d5:
                    36:d6:80:ef:c9:b7:15:97:7b:07:b1:b6:ee:3a:af:
                    45:98:91:08:6a:22:41:d2:d7:2d:3e:78:94:ae:11:
                    62:a4:20:4a:bc:c3:34:7d:df:03:95:65:cb:a9:36:
                    ec:40:46:dd:77:78:2a:90:cd:14:77:c5:d0:49:85:
                    fd:26:d7:4e:9e:0b:2a:9e:2a:c5:26:2f:ee:08:4b:
                    ef:6d:65:c4:b6:f7:00:f0:a0:a4:7d:cf:af:e5:d2:
                    37:b7:af:91:89:8a:e6:9d:23:a4:c5:2d:d1:5e:0f:
                    a3:7c:18:f8:f7:d6:a6:0c:c9:97:1f:61:bb:2f:ad:
                    ba:79:da:eb:76:b6:dc:a6:53:1f:fe:77:b2:6b:a3:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:C9:DC:0A:70:0C:AD:FD:3D:BA:D8:B4:16:CF:E1:E6:F8:8F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/417ccfdc-e37f-345c-bf62-aafbc9a8ef09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:99:f0:12:77:97:22:d2:37:4d:a9:89:17:a4:3b:81:23:
         a3:6a:83:de:46:eb:07:79:36:19:93:3c:98:fa:d1:06:21:f3:
         42:05:a5:0a:fc:4c:99:91:ba:32:e9:f9:ed:35:47:a9:9b:c5:
         5b:21:c9:45:9c:87:42:c1:89:44:27:12:f3:71:da:d9:18:c1:
         d3:1c:2d:f3:d4:60:dd:37:14:46:02:de:9d:d9:ff:2f:21:e1:
         f3:b6:3e:74:05:f9:11:13:b9:33:a5:e5:2e:8d:b2:e7:78:5a:
         1e:89:c3:0b:fb:ba:20:0d:58:38:5a:53:fd:9f:26:9f:9b:ba:
         46:da:a6:8b:90:ee:4b:b9:50:7f:e8:20:37:ea:20:9b:34:1b:
         96:99:ff:3a:c8:ff:45:3a:f5:d5:8b:d4:f5:35:bc:a8:c9:cb:
         3c:5a:fe:28:77:90:55:d6:c8:5e:11:04:6e:b8:b4:42:97:27:
         29:d5:9c:34:fe:e1:23:98:35:11:ed:80:57:bc:6b:7c:19:a7:
         81:cd:67:84:78:66:74:8a:77:41:c6:c8:72:61:ac:b2:04:58:
         c8:41:f5:55:31:79:91:f8:72:56:56:9e:0d:d3:e5:79:80:9c:
         cc:e4:13:9f:c8:bc:ee:ad:87:02:33:58:68:f5:51:b8:a3:9d:
         93:aa:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:48 2024 by rpki-client on console-ams.rpki-client.org