Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63486441-0be5-31a5-8406-70877c8c2b0b.roa
File:                     63486441-0be5-31a5-8406-70877c8c2b0b.roa (raw, json)
Hash identifier:          6sv3J+uti6ZAM2J41bER6vqqdiWQRkRqJH2kHETRmVs=
Subject key identifier:   25:F1:35:36:58:A3:3E:B8:26:12:B7:9F:93:76:2C:F6:61:73:87:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ADF18B9F688E955647DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63486441-0be5-31a5-8406-70877c8c2b0b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        71.192.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:df:18:b9:f6:88:e9:55:64:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=29f9b60c-8ba1-4f72-a627-6873d4b1c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:4e:a8:fa:a3:f9:02:0d:03:26:a5:40:6a:
                    28:29:7b:be:50:eb:cf:55:fb:47:b4:54:46:07:12:
                    b5:b3:ef:c0:a7:a7:29:6b:68:42:27:67:4d:8a:30:
                    b0:d0:ec:a3:f1:b3:52:fc:95:2c:77:b2:58:67:06:
                    2f:17:45:5b:17:f7:3d:7c:71:53:0c:b1:2b:ae:38:
                    92:27:fc:1e:91:75:e0:62:52:0b:09:e7:79:11:b7:
                    e1:33:36:a9:58:98:b6:b6:f1:f9:5d:a8:ab:a9:03:
                    62:3d:e5:cd:6e:d4:c6:d1:1b:a9:01:e5:11:c1:d7:
                    db:1d:ca:d3:e2:2e:7b:d9:68:fa:a9:4d:ae:2e:3f:
                    51:bb:b8:a0:81:3d:55:aa:f4:67:19:0e:1b:da:17:
                    78:59:a9:8b:22:83:41:33:de:b0:0f:11:63:00:4c:
                    b4:e0:46:95:5c:c7:b2:b3:31:ea:9d:a7:80:ac:ea:
                    ed:c5:1c:67:c5:cf:80:f2:72:58:93:8d:c5:43:95:
                    83:84:4a:e9:3b:29:64:94:8b:2e:f9:de:2f:79:98:
                    86:32:2b:d9:a6:48:1d:06:50:da:4a:90:30:37:0c:
                    80:e8:ae:9a:52:cc:4b:1b:cb:fa:17:17:72:db:4f:
                    e9:c8:63:fe:d7:0b:5b:a5:bb:6c:d3:3e:d4:ea:44:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F1:35:36:58:A3:3E:B8:26:12:B7:9F:93:76:2C:F6:61:73:87:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63486441-0be5-31a5-8406-70877c8c2b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.192.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:20:79:f9:ec:63:1c:3f:41:92:5b:3d:a3:d2:2d:d8:bc:d9:
         c0:ab:dc:e3:3f:9f:6a:13:22:13:5f:b1:0c:fa:bf:2f:24:d6:
         d0:15:3a:04:0d:81:67:08:c3:d9:57:48:50:dc:c1:93:88:35:
         62:0e:9a:db:fd:de:40:d7:eb:57:20:92:e8:5a:cc:91:87:9a:
         ca:39:65:52:63:6b:bf:45:0b:13:07:e1:39:6e:50:ae:9f:ed:
         d4:89:4a:b0:85:63:d1:c8:21:4e:88:24:fd:cd:f2:41:aa:9a:
         8e:0e:d7:8a:3a:31:b4:8d:33:01:1c:b1:55:82:6b:ce:f2:d6:
         fb:68:d8:e0:f9:1c:45:e7:6f:00:49:8a:bd:c2:86:a7:14:9e:
         e1:70:a7:2c:0a:90:61:90:72:0f:a4:a9:4b:bf:ca:ed:aa:28:
         d0:ed:34:a0:b4:af:87:ba:80:89:16:6f:f2:e9:7f:8e:96:17:
         22:98:94:9b:62:02:22:de:f9:03:34:4e:9d:b1:f0:ba:b0:e6:
         c0:55:72:ea:01:9e:78:82:2d:8d:01:ed:99:67:37:ee:f8:11:
         15:51:8d:62:d9:14:85:a1:59:62:b0:69:6f:85:cc:3d:a8:cb:
         be:23:5a:f8:4b:14:4a:a9:d5:ab:64:3c:78:83:79:96:73:91:
         30:27:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:26 2025 by rpki-client