Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43439641-895d-32fe-8bc2-bebce564f3ab.roa
File:                     43439641-895d-32fe-8bc2-bebce564f3ab.roa (raw, json)
Hash identifier:          zz4WvN+cCUpT84qFWR6DMBZAaO4MbzOGy9EmXm4XPLc=
Subject key identifier:   56:8D:01:25:13:5E:B5:65:C3:73:C2:BB:E9:2E:22:18:FA:16:8A:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C688FEA1A9AF05BAAF8E60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43439641-895d-32fe-8bc2-bebce564f3ab.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        67.189.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:88:fe:a1:a9:af:05:ba:af:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6938be3e-c2c2-4aa6-a3ad-bf2b81e8b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:c9:63:0d:ea:67:c9:eb:9e:5c:23:d0:6f:
                    22:57:67:16:29:d9:da:b6:76:37:f2:8e:0d:57:31:
                    22:f3:fd:fa:67:ad:a0:4c:0e:7e:ea:1d:8e:ba:44:
                    30:3b:46:7a:53:52:65:da:5e:3a:ea:c4:f5:16:93:
                    66:de:54:d4:93:a0:3e:50:b5:e0:5a:c3:5b:2f:dd:
                    6f:d4:7c:c9:56:50:18:86:b2:fc:b3:ab:55:d3:28:
                    9a:7b:56:bf:4e:f2:fe:24:f6:7b:b7:1f:70:08:8e:
                    fb:b5:5b:c7:21:44:6a:b0:47:5b:dd:97:e4:f6:fa:
                    28:82:85:3c:84:50:83:39:76:4f:0e:cc:ad:7e:53:
                    cf:10:1a:b6:2d:3b:21:67:f4:60:b4:be:44:52:9e:
                    47:8b:3c:ee:4d:86:4c:2a:ce:08:19:98:e0:75:1c:
                    f0:9d:ec:50:e0:36:fc:37:cf:66:e6:d6:34:9c:6c:
                    6f:9f:fc:f9:05:8d:06:cd:c8:6f:e5:12:76:9e:e4:
                    20:d2:65:2f:80:c8:d5:77:36:ca:cd:ab:31:b0:46:
                    83:9d:fb:06:6a:8e:ae:66:4c:b0:63:ed:28:bc:20:
                    78:a3:76:73:6f:e0:e0:08:e1:52:21:dd:61:f0:85:
                    6d:7f:fd:e0:fa:4c:9b:72:a1:22:96:61:ef:1a:64:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8D:01:25:13:5E:B5:65:C3:73:C2:BB:E9:2E:22:18:FA:16:8A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43439641-895d-32fe-8bc2-bebce564f3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.189.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:ec:ca:29:76:86:21:0d:7b:9a:d6:61:f8:8d:2a:a0:8e:
         04:14:52:1f:c5:43:2f:b5:e9:57:5a:6c:c6:59:44:1b:95:c9:
         c9:d7:4b:5a:47:c8:14:6c:ad:92:6a:05:a9:b0:ea:e8:93:17:
         1a:6f:25:93:1d:af:f3:8c:2b:14:de:0b:d5:39:c2:d3:81:b3:
         81:01:58:07:79:eb:dd:12:07:ee:67:18:c1:c0:73:32:fb:bf:
         ff:db:c0:89:50:cd:4d:7f:e9:c7:f3:77:4e:c6:34:4f:bb:5d:
         1a:16:89:e7:3a:f9:48:1d:2b:3b:db:b1:d8:ec:bb:44:95:25:
         1f:6d:e7:39:dd:32:a3:54:fc:82:8c:96:51:bc:7a:1f:a6:82:
         43:d1:da:ae:67:88:3e:57:01:ef:73:2b:c9:4c:2c:b7:9b:b5:
         4b:a9:b7:fe:32:7a:4e:19:6e:0b:1e:38:11:45:fc:97:f5:54:
         20:b2:78:75:44:b8:0f:04:8f:77:32:c7:36:7a:d1:50:cb:e5:
         76:a0:d1:b3:e0:1b:5f:9c:14:6a:0c:3c:c6:78:38:da:4b:de:
         d2:43:34:56:75:cc:c0:96:1a:fe:70:91:93:8a:13:89:ae:a1:
         51:e1:0c:00:dc:71:48:4a:57:0c:3a:ec:0d:af:ca:07:fc:97:
         ce:da:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:58:31 2024 by rpki-client on console-ams.rpki-client.org