Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5811dfc5-c7f5-3dcb-90ed-b0096832183f.roa
File:                     5811dfc5-c7f5-3dcb-90ed-b0096832183f.roa (raw, json)
Hash identifier:          NruPy038xDPep1WxFYyrcdkcc5Jq7XaNjZaVZtpfEBg=
Subject key identifier:   37:1B:73:48:4F:63:69:53:6A:B4:75:1D:26:C7:86:8D:E3:5B:CE:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C64C326A220F6DAE9B0600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5811dfc5-c7f5-3dcb-90ed-b0096832183f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        174.168.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:4c:32:6a:22:0f:6d:ae:9b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6c5d2fc4-22ef-40b0-a678-bafd373ef5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:2b:2c:94:f9:1e:0e:e0:f2:70:f9:63:fa:
                    1b:0d:e3:9a:61:71:86:bb:f4:0d:43:4a:aa:20:a2:
                    a8:93:c8:bb:18:cf:22:3c:81:2d:32:1d:f3:fa:ef:
                    d5:f3:cc:c1:eb:78:26:4d:ca:80:60:cd:90:90:4f:
                    d8:2f:e1:97:27:67:9e:b0:bc:a1:65:4a:58:47:34:
                    7b:bf:a6:98:37:1c:14:1b:48:b5:d7:dc:16:06:5c:
                    74:4e:04:6b:fb:cd:19:dc:6c:08:78:96:e2:96:36:
                    02:8e:69:6d:39:00:4c:06:ba:78:b5:51:a1:b5:53:
                    88:8d:0c:83:04:e1:db:04:37:3d:7b:6b:2c:9d:33:
                    a8:5d:e3:6e:93:1b:34:ba:a6:7b:52:a7:01:66:59:
                    49:9d:c9:f4:6c:0a:61:13:3c:7e:92:2b:e3:fd:57:
                    34:05:d4:ce:df:5a:67:03:2f:44:d3:f5:a8:b5:59:
                    a3:63:19:14:7c:6f:ed:42:fa:93:f0:3c:ea:d1:70:
                    9e:a7:04:1b:b1:e8:3f:2f:cf:4a:7e:ae:6a:32:91:
                    08:8d:a0:34:e6:c6:a7:f7:00:fe:5a:cb:ab:5b:e5:
                    39:69:e0:fc:4c:38:a9:5b:46:82:c1:86:08:b4:8e:
                    ce:81:86:76:a2:e6:e3:c2:dd:fb:a2:1c:20:f1:da:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:73:48:4F:63:69:53:6A:B4:75:1D:26:C7:86:8D:E3:5B:CE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5811dfc5-c7f5-3dcb-90ed-b0096832183f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:a7:66:7c:51:58:9f:49:6b:97:14:7f:61:b2:de:3d:c7:
         61:b8:24:2f:40:73:f2:57:f0:03:83:c8:ad:b6:a0:da:5b:64:
         05:75:91:57:a3:2e:a1:d7:f6:b8:1a:7e:33:6f:c4:43:15:fd:
         5c:74:38:09:af:6c:e4:4f:de:60:13:3b:c2:e4:0f:01:02:1d:
         4a:15:04:65:31:1b:20:bc:4a:48:fb:48:de:41:7d:4b:12:27:
         88:54:b6:f0:25:5b:33:6d:1e:ea:b2:aa:cb:77:c4:58:ae:4b:
         c0:07:39:dd:4a:20:6f:03:1f:10:17:12:f0:53:7b:c2:93:ba:
         6e:55:a3:5c:55:2d:70:6f:9e:6d:93:c3:a2:d9:ac:5d:91:55:
         ff:21:72:8e:b7:66:56:30:70:8a:23:65:47:35:24:5b:06:aa:
         d9:c2:08:0b:74:f9:a9:31:66:83:c9:48:a8:8e:b5:63:eb:6e:
         61:e7:57:df:8d:b7:a2:81:18:39:17:29:4d:28:9c:33:e4:da:
         b3:0d:73:63:43:ac:cb:ed:2c:40:12:61:c1:a1:fd:46:e0:28:
         0f:f8:c1:9f:cd:d0:10:36:c9:57:91:cc:51:3b:78:38:b1:c1:
         a4:fa:95:03:b5:37:2e:74:ab:fb:b1:c7:0b:e6:53:7c:75:82:
         69:88:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:00:49 2024 by rpki-client on console-ams.rpki-client.org