Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa
File:                     4f701028-801e-37c3-8fd3-696ff19387c5.roa (raw, json)
Hash identifier:          bQOnR10ixA08YKakZvhoAnariJ2vp3BITyzhG01ueV0=
Subject key identifier:   18:2B:ED:78:CC:B2:0E:1B:4C:1D:DB:CB:82:1F:9F:61:B3:42:98:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6905DB0EC051EB00321E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        71.233.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:90:5d:b0:ec:05:1e:b0:03:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=146bf6d8-baf0-410d-a9bf-2e3f3dc74ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:fb:f8:0c:7a:81:6c:5a:dc:45:9a:45:b6:
                    c3:d6:9a:1c:2b:e0:eb:ca:02:71:e2:16:8a:f3:04:
                    67:3e:2d:5f:b0:4c:0d:87:21:01:90:ff:1f:ab:e3:
                    81:52:9c:7d:a4:4f:6a:68:14:56:e8:fd:6a:4b:57:
                    cf:5d:71:e7:23:53:76:ee:2a:44:b8:f9:76:3a:0e:
                    5e:21:99:45:09:b0:13:8f:e7:f1:84:73:ca:9f:74:
                    fd:ad:d3:30:b1:29:85:47:31:3c:3d:ef:e4:87:b9:
                    e2:98:69:07:01:6c:43:b4:aa:7d:ea:56:0a:cf:ed:
                    7c:88:ba:0d:63:e2:d5:00:3c:00:99:05:2c:ee:d7:
                    64:8b:2a:5e:02:4b:8b:41:4b:d1:94:fd:42:72:b4:
                    02:8a:90:47:76:a3:11:74:ad:dd:5c:9e:b6:b3:95:
                    c4:59:38:f6:12:1f:78:f4:23:13:a3:46:0c:bc:3c:
                    04:7e:ef:03:d1:f1:ed:d5:39:f8:e5:56:41:1a:5c:
                    bf:86:d5:85:d8:66:7a:f5:61:bc:4c:eb:18:3f:7d:
                    20:20:0a:58:af:34:aa:cf:a0:19:28:9d:c1:cf:4b:
                    1e:90:91:00:91:7e:73:bc:c8:33:bc:05:e5:d0:ea:
                    bb:3e:dd:84:94:21:60:c4:56:11:fa:ac:5d:a3:21:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:ED:78:CC:B2:0E:1B:4C:1D:DB:CB:82:1F:9F:61:B3:42:98:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.233.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c8:1a:2a:99:04:54:20:47:1e:57:26:ce:69:4a:f6:32:b0:
         1f:80:12:3c:96:63:c2:8f:f1:3b:c1:f5:b0:28:ed:67:95:95:
         31:fd:08:03:79:f5:cf:df:e3:82:93:0d:a7:f6:2f:4d:fb:90:
         79:42:4c:df:1c:e8:40:29:52:91:44:1e:b7:09:ff:d4:12:00:
         74:34:2a:d3:78:55:b4:31:85:93:25:e5:f2:86:f6:b8:b4:ff:
         cf:3e:a3:e9:a9:c6:6b:a5:01:ce:d7:da:2b:3d:fe:91:8f:6d:
         5f:3a:ce:b1:0f:f1:ae:bd:bd:f8:c3:58:b3:52:df:1e:10:fb:
         1a:65:8c:ac:12:9b:38:ac:26:99:0f:c5:8f:bb:ce:0d:97:f2:
         ae:f9:58:e9:f3:da:dd:e8:28:d3:63:df:f8:6e:41:54:7d:05:
         7b:a9:a5:d6:9d:c0:a1:f1:6e:60:3e:35:fb:48:3e:e6:ba:33:
         dc:b5:4c:36:02:56:9d:4e:db:92:88:67:d8:c5:ea:46:d6:69:
         fd:48:53:2d:de:d4:59:77:b6:79:39:e5:24:fd:9c:2b:8f:fb:
         0b:3c:b4:21:93:11:58:18:c8:f9:90:32:ba:f4:24:9c:44:5c:
         ba:13:e3:da:d4:2c:ca:15:18:fa:1f:49:a6:42:54:27:a3:0a:
         3e:db:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:04 2024 by rpki-client on console-ams.rpki-client.org