Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481b73ae-8d73-3f5a-aac4-e0cfbaacb9ac.roa
File:                     481b73ae-8d73-3f5a-aac4-e0cfbaacb9ac.roa (raw, json)
Hash identifier:          SXnvoOsqzcy3qJ7Sqs/6amkHSwlAnSg8jxHZn/23BXk=
Subject key identifier:   50:5D:0A:F0:5F:F3:68:0B:30:E4:88:2D:87:E3:10:FB:0F:16:97:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8243EC8C1D740C4811B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481b73ae-8d73-3f5a-aac4-e0cfbaacb9ac.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        66.30.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:24:3e:c8:c1:d7:40:c4:81:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=0f7ed6e7-745c-4bb8-9f0f-2e0906a81197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:df:06:74:6a:97:82:2f:e2:33:2f:e9:8d:
                    ce:c5:8d:f6:30:0d:0f:07:40:3a:a9:0f:43:46:c4:
                    92:49:3c:07:f8:3a:b4:56:af:89:ab:c4:e2:a2:b4:
                    b1:89:d1:c4:4f:29:cb:48:a3:ae:70:25:7b:b2:f2:
                    01:85:77:ea:b5:19:e7:b1:f3:c0:af:55:bc:a6:97:
                    80:02:6c:0e:64:1f:a3:17:16:94:a8:a7:1e:c7:64:
                    04:d7:59:97:8b:e2:5b:ea:bd:7d:22:da:cf:fe:0d:
                    81:a1:78:4c:01:67:57:9a:aa:5a:d1:3f:a8:a4:f4:
                    52:0d:d2:d1:86:7e:79:15:38:02:10:d3:05:6e:69:
                    0a:f4:ac:29:2e:d9:02:63:fb:6b:89:88:2c:b7:c6:
                    24:ee:68:46:58:06:cc:67:4e:b6:3d:c6:8c:bb:15:
                    85:36:96:3b:57:da:23:b7:af:5f:ce:1c:e3:6a:43:
                    45:c1:89:55:66:44:1a:cf:74:67:02:dc:4f:75:6d:
                    9d:61:2f:18:27:18:9b:d3:77:ac:21:b4:58:f4:18:
                    e8:d7:1a:98:3b:62:ca:2b:d9:0d:35:1e:69:24:54:
                    92:bb:b4:36:b7:a2:8a:19:18:e1:5c:12:c9:b6:12:
                    97:03:0e:6c:29:db:55:90:96:f2:13:ef:fd:20:e7:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:0A:F0:5F:F3:68:0B:30:E4:88:2D:87:E3:10:FB:0F:16:97:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481b73ae-8d73-3f5a-aac4-e0cfbaacb9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:45:d3:57:b3:b7:24:77:f7:3b:32:e7:f2:72:12:28:f2:00:
         80:5b:6e:88:c8:04:8e:f7:46:5d:b9:a0:46:0a:3d:18:3e:1d:
         74:34:1c:76:b6:af:a9:cb:80:35:e8:fc:69:7d:58:ba:88:29:
         70:be:41:69:ed:a4:bd:c9:38:d1:a3:65:4b:11:60:30:28:5c:
         27:69:f9:a3:6d:61:98:2e:9f:57:e4:9d:b9:87:3a:6f:e3:aa:
         8a:30:8b:ab:b5:03:5e:c2:c4:7f:81:6c:b2:fa:5f:77:2f:17:
         c6:4f:cc:0d:ca:b1:43:29:55:f8:ad:bc:53:b7:20:f1:ef:33:
         08:40:f3:f2:b0:73:5f:2c:6e:6c:ca:58:d4:1f:1f:e5:1f:d3:
         be:f1:e0:c2:f5:67:1a:ea:50:b0:43:ca:f3:0b:71:f7:5e:3b:
         e5:47:b4:6a:6b:29:52:37:31:a1:fb:40:37:65:7d:d3:5c:bf:
         0b:8a:b3:13:e1:8f:53:0b:fc:c0:3a:15:be:eb:fc:75:da:f8:
         2e:43:41:08:bb:20:5f:5d:02:b8:aa:f0:32:08:37:91:da:f1:
         f3:6d:b8:b2:b4:1d:32:c1:e0:99:9c:3b:fb:88:26:d9:c4:40:
         fe:e1:0e:d9:ea:ce:1c:57:b7:1b:6d:12:d5:7d:a1:6f:4a:d8:
         f4:ed:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:07 2024 by rpki-client on console-fra.rpki-client.org