Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa
File:                     546bc441-d5b4-3d88-802b-9e5408520c02.roa (raw, json)
Hash identifier:          lvEo4RF6Mm9Pb09umzPv8nVND3j4BBqgxnMvjrrqrJQ=
Subject key identifier:   25:45:C1:13:36:26:E5:01:A3:12:16:69:E7:A6:0D:8D:6F:33:E9:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D0A99A8C586DC1BD64D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.174.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:0a:99:a8:c5:86:dc:1b:d6:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8d8de9e5-3d71-4cff-8002-0df283a64945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:49:32:00:bd:c5:52:af:f0:61:f4:37:65:
                    99:d2:5d:89:60:5b:34:cb:f9:4c:04:85:82:af:ca:
                    6c:ef:b1:1a:b1:72:39:c5:14:e3:b1:76:8e:9e:db:
                    78:c5:4f:a5:af:98:08:2d:ce:39:64:fa:96:9c:be:
                    c4:45:0a:ef:42:7f:2d:f5:42:a1:04:a0:ff:27:ca:
                    4a:bf:88:ef:d2:b8:69:59:35:60:5f:65:72:01:e9:
                    b7:b6:36:cd:0d:20:ae:11:de:35:15:77:e5:2f:9c:
                    96:96:e0:b0:78:d4:ea:a8:53:98:8c:f7:c1:02:8b:
                    36:e6:f6:79:07:f0:5a:ae:e3:6c:0c:b5:d9:2b:f3:
                    bc:3c:fa:29:18:50:8e:5b:b9:c0:b5:d6:c7:7d:d1:
                    11:b4:41:07:c3:9c:e2:27:2a:6b:fb:16:52:a6:fd:
                    9d:8e:64:71:49:b7:50:da:f4:92:17:47:17:32:e6:
                    b3:1c:9e:d7:a0:77:ed:a8:d9:3d:14:ae:bd:6f:18:
                    57:a9:70:0a:63:45:97:41:31:9a:81:2a:17:37:9d:
                    11:d5:f6:81:64:93:23:6d:28:37:fc:26:85:a1:fa:
                    7f:65:95:88:88:98:38:4e:ec:4a:4c:7a:f8:5e:cc:
                    29:01:32:c0:55:ee:2b:0a:45:00:f2:be:13:78:27:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:45:C1:13:36:26:E5:01:A3:12:16:69:E7:A6:0D:8D:6F:33:E9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.174.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:3c:81:a2:2d:9d:25:73:96:91:4e:bf:64:6a:dd:7d:c5:
         31:0b:0e:c0:c2:53:76:66:ca:5c:e2:46:40:27:13:71:45:fa:
         7b:82:f1:ef:fc:d5:c7:58:ec:e8:0e:7b:bc:bc:62:c3:ac:c3:
         78:96:9d:cb:1a:7d:ca:cc:74:9f:38:82:62:8c:0b:b2:08:d7:
         d8:45:d4:d9:73:59:28:e8:45:87:ef:7c:57:eb:96:72:c6:e1:
         4f:1b:71:ab:15:83:db:9b:cf:29:5a:f7:ca:aa:7c:a9:74:53:
         1d:b6:c8:c4:78:66:03:9b:4c:a4:2b:68:04:72:d9:a0:fe:79:
         8c:5a:58:62:05:bc:f1:f6:9e:d1:44:cf:ec:5d:e7:0f:eb:cd:
         58:c6:28:ba:f2:f8:93:f0:46:91:14:15:df:2a:19:3f:59:e7:
         87:28:e3:93:e5:ea:aa:db:cb:d8:28:69:6f:c0:c4:a6:a7:e6:
         11:3d:c7:1d:93:02:2c:b3:8a:19:41:0f:21:90:2d:c6:9c:a0:
         26:aa:00:bc:bd:43:5c:e8:62:dc:74:4f:81:e4:00:8b:3c:10:
         ff:0f:3e:2f:e3:ea:6f:20:8a:07:0e:ad:ee:63:6a:95:8e:f9:
         66:e1:25:47:80:4b:81:33:5a:76:43:8c:80:6e:b3:1a:f1:69:
         74:e3:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:58:46 2024 by rpki-client on console-fra.rpki-client.org