Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55e15dc1-fe8d-3270-8d5a-ab2fde5db5c9.roa
File:                     55e15dc1-fe8d-3270-8d5a-ab2fde5db5c9.roa (raw, json)
Hash identifier:          uhGIFunBrnxGg3Ip8P9CQvX7/wEHNdoE9IOPYKJnSog=
Subject key identifier:   1A:9D:53:6A:5F:EA:02:84:B3:E4:0D:DA:BA:A2:FD:DC:0D:A0:77:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF78BECE4F04E8D7FC836C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55e15dc1-fe8d-3270-8d5a-ab2fde5db5c9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        74.95.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:8b:ec:e4:f0:4e:8d:7f:c8:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bfdda481-54dd-4366-b126-276dc22a0c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:bc:8a:0c:41:1d:67:c6:96:05:fc:be:12:
                    dc:a8:5f:b2:fb:78:f5:e6:7d:6c:e8:36:f9:bf:cf:
                    8e:aa:37:19:29:47:d4:19:35:97:29:a9:0e:6e:77:
                    77:6d:ff:ec:58:f8:75:07:b3:1c:53:b9:e3:a3:8b:
                    aa:b8:aa:4c:21:09:3c:88:30:c3:89:17:59:ed:59:
                    76:ce:69:6e:90:6a:2b:66:39:ce:47:58:5f:c4:d9:
                    a9:84:7c:29:e9:ec:bc:19:61:09:bd:04:69:0b:15:
                    c0:64:3b:5d:bd:a8:30:2f:8c:8d:53:90:fb:22:22:
                    9b:ed:ed:9d:0a:14:ef:78:ff:82:6c:2e:85:7b:55:
                    68:9a:01:22:27:5d:30:d4:2f:98:55:70:f5:7f:37:
                    24:85:15:5f:b0:3a:40:f1:cf:97:78:90:09:8c:28:
                    32:b1:05:9f:2c:21:d8:61:0e:dd:29:92:86:b4:dd:
                    e6:a4:32:48:39:32:12:9d:a5:45:62:89:74:4d:c0:
                    ab:11:81:0d:dd:2f:35:cc:1e:d1:2d:a3:18:b2:d9:
                    7c:81:43:74:98:b2:c7:6d:80:c9:95:b7:71:d4:6f:
                    27:87:11:49:72:b9:a7:78:15:c4:ca:d0:64:03:35:
                    8c:98:48:4b:9b:c4:c1:51:f5:11:94:74:5e:b5:8b:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:53:6A:5F:EA:02:84:B3:E4:0D:DA:BA:A2:FD:DC:0D:A0:77:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55e15dc1-fe8d-3270-8d5a-ab2fde5db5c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.95.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:05:67:00:05:0f:b6:3b:f6:33:bc:4d:3e:47:28:76:66:c1:
         26:d4:e0:cf:f8:7d:80:38:28:1b:d4:6a:14:b0:82:ca:b9:88:
         cf:3a:36:22:ff:ff:e8:17:9d:f4:47:3f:48:9c:3d:7b:9a:50:
         46:56:c8:1d:98:ab:e7:35:59:60:92:25:f0:86:32:82:d9:9e:
         63:1a:25:09:2a:e0:e1:51:37:52:21:05:bd:df:1c:1b:85:ac:
         1a:03:7b:17:fe:1c:85:9d:2b:03:1a:e3:03:c2:b8:75:7c:81:
         c8:4f:3d:df:92:37:b0:8c:e9:3f:e3:72:68:08:2b:27:44:b6:
         9c:bb:8d:52:fa:89:f4:08:5b:24:56:06:6d:66:e3:f2:15:98:
         92:fb:ba:38:5c:3d:45:2a:02:33:43:6d:39:f6:2b:cb:ce:1b:
         66:99:18:dc:a4:cb:80:65:83:98:c9:59:d9:ac:ab:5e:ec:ee:
         99:61:98:b7:3c:ad:91:26:0a:36:41:1c:20:dd:57:cd:eb:dd:
         ce:bb:a6:63:75:48:95:9a:bc:e0:ac:26:66:fa:b8:64:43:d7:
         01:aa:e1:6a:df:a5:84:eb:2e:ca:b3:29:9d:d3:ec:c7:dc:01:
         4f:3e:81:8b:3f:8d:d0:a6:39:c9:c8:bf:bf:be:31:ae:ca:dd:
         7a:1a:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:30:34 2024 by rpki-client on console-fra.rpki-client.org