Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a8ae5e2-3cff-38b4-a735-b78f89bf5ffa.roa
File:                     5a8ae5e2-3cff-38b4-a735-b78f89bf5ffa.roa (raw, json)
Hash identifier:          YjmnhKoEQxpCJ+CS1GHUsVZq6+9QVcDbEZ63opfond8=
Subject key identifier:   4F:0F:9A:21:A7:B5:2C:F2:2B:76:7B:40:FD:8B:70:EC:CC:5E:7F:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB3984522E7FBBA462A700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a8ae5e2-3cff-38b4-a735-b78f89bf5ffa.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        71.195.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:39:84:52:2e:7f:bb:a4:62:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=da8d41e4-9810-4beb-bdb6-75474dca7e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:15:a0:21:fc:6a:52:52:f3:48:0c:b7:bc:
                    23:60:a3:45:74:89:32:ae:b8:92:83:61:c1:d7:e6:
                    07:0b:c3:05:5b:60:ba:62:d6:5d:b8:4d:2f:cf:62:
                    0e:39:d4:c1:e6:e8:d8:9b:c8:59:6e:d0:91:19:13:
                    c2:5a:7e:8a:28:32:a8:2e:00:25:8a:1c:c4:b1:32:
                    47:73:78:c1:d1:1a:89:95:dd:d0:e1:1a:21:2d:e8:
                    1f:2e:f3:4d:f6:b9:b5:15:2f:bd:8f:2e:9e:33:13:
                    08:51:8b:21:f8:73:9d:e0:84:11:c3:3b:8d:be:f5:
                    04:3f:3f:5d:a6:d7:5b:9c:73:00:9b:b4:ae:25:92:
                    20:aa:a3:fd:a9:15:fe:7d:02:00:2e:47:ba:64:e2:
                    c4:64:f1:a4:1d:9f:61:64:d8:07:68:53:3a:b6:65:
                    9e:d6:dc:66:7c:73:da:8d:b3:e4:f2:da:c7:65:fb:
                    66:b0:ae:83:62:ad:8c:17:99:e4:fb:c0:50:a8:b1:
                    b3:4b:89:7d:4c:c8:53:6e:2b:a4:4b:ff:8b:24:bf:
                    71:52:be:da:2a:7b:d7:70:fd:2b:90:66:7d:d5:18:
                    dd:f5:76:b6:32:9c:58:45:ae:a6:28:56:31:32:24:
                    83:4f:1c:5d:ae:b0:de:7e:b7:8e:53:1c:c5:09:b7:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:9A:21:A7:B5:2C:F2:2B:76:7B:40:FD:8B:70:EC:CC:5E:7F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a8ae5e2-3cff-38b4-a735-b78f89bf5ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:5a:3b:83:90:8f:4b:64:34:0c:8c:d6:71:9d:86:1e:fe:75:
         51:19:d0:13:31:61:86:de:9e:d7:f9:67:7b:ca:b4:5d:ad:15:
         0d:cb:c4:02:61:e2:fd:64:9e:03:51:82:c3:3a:18:86:88:a3:
         50:5e:78:de:0a:26:70:a7:e5:43:27:21:c7:f2:92:01:d5:5b:
         11:64:b5:41:7b:81:20:66:19:42:e8:3e:67:b0:d3:09:d2:83:
         28:8c:cd:8f:30:9f:44:dd:0e:44:6d:4a:71:ea:5d:43:8e:c1:
         fe:c2:f3:59:df:a2:49:2c:e9:9a:f5:37:e0:7a:73:17:8b:d8:
         23:38:83:34:62:be:e4:d3:10:f7:5a:bc:94:b9:9e:06:c6:ed:
         41:d1:82:4f:58:99:0a:88:5b:92:19:21:d5:ee:8a:6c:ce:72:
         38:72:d0:c2:26:56:af:98:25:fc:a7:26:99:01:21:fc:8c:31:
         71:f7:68:8d:d2:e9:ac:1a:c3:96:8a:96:45:6c:ac:59:3d:c3:
         8e:58:dd:2e:6f:1e:09:71:88:4a:3c:56:13:50:18:d0:3e:0e:
         c2:3d:a3:c9:c7:64:80:cc:3b:fc:6c:e4:19:ee:86:4e:3a:fe:
         29:dd:54:50:62:e5:bb:61:7f:5f:ba:d4:94:16:3a:de:ae:64:
         18:ff:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:12:12 2024 by rpki-client on console-fra.rpki-client.org