Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6735cad0-9c60-3b71-9f87-4a35cbb01925.roa
File:                     6735cad0-9c60-3b71-9f87-4a35cbb01925.roa (raw, json)
Hash identifier:          JIv20xg2tg9VBWBkhOKYdtj4zUBtkWUKT2vNiP+MlkI=
Subject key identifier:   60:36:3A:87:76:8E:E6:24:24:AB:D0:8A:FC:21:39:6E:D9:DE:7A:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D08FC89FEDB5EF740322A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6735cad0-9c60-3b71-9f87-4a35cbb01925.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.170.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:08:fc:89:fe:db:5e:f7:40:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f2f9b6e5-9b84-40e7-8be2-01981bdb4818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:ef:a4:56:b5:e0:a3:1b:a8:51:f7:cc:bd:
                    c8:08:9e:51:81:29:77:2d:46:f4:93:4c:de:e5:17:
                    d3:0e:82:8b:91:ee:fa:fa:b6:eb:7b:6c:44:7c:92:
                    c5:16:ac:1e:1b:96:e0:6b:30:4a:c3:31:b6:22:dc:
                    37:85:ea:9d:45:db:82:b4:e7:17:8c:c3:ec:e3:8a:
                    06:28:ff:88:04:fc:ae:da:36:7e:55:da:c5:fa:ef:
                    e5:9f:9a:47:a8:5f:2e:d5:a3:67:23:a3:ee:f0:e9:
                    cf:f0:6a:94:c5:bd:86:a1:80:b9:7b:57:84:8e:b9:
                    ba:f7:5f:27:fd:16:52:ab:ec:db:31:bb:7d:de:74:
                    03:5f:b9:64:17:3f:d5:40:73:22:10:d4:70:c5:90:
                    a3:a1:6a:28:c9:08:9c:94:ce:b0:ad:42:19:a5:eb:
                    ea:81:dd:d9:9b:02:1e:e4:40:56:67:e2:5b:b8:4c:
                    8d:40:31:3e:03:56:83:a0:a0:1e:17:64:17:66:82:
                    8a:b7:b7:5a:8d:0d:25:01:ad:7b:c4:e8:23:16:36:
                    62:01:09:e3:8c:1c:34:6b:3a:fe:63:dd:4f:fe:d7:
                    49:18:8c:15:bf:44:07:02:27:da:b4:81:e7:46:9b:
                    f3:2d:2a:57:17:42:dc:22:4d:d3:2c:44:b9:35:ae:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:3A:87:76:8E:E6:24:24:AB:D0:8A:FC:21:39:6E:D9:DE:7A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6735cad0-9c60-3b71-9f87-4a35cbb01925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.170.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:25:62:a4:75:e4:34:bb:02:6f:95:44:86:29:da:11:19:
         53:22:50:1c:32:02:0a:dc:96:25:80:be:69:98:18:1d:ef:11:
         f7:42:9e:08:0b:9c:09:b8:fe:1a:a9:90:72:60:9b:0d:7a:f1:
         8d:96:f8:f6:3b:76:b7:44:ec:f3:53:b6:c8:7f:b8:d4:1e:de:
         fd:6a:07:5c:b5:86:85:a2:f9:e6:27:94:01:b3:07:bb:33:97:
         e3:51:9a:e7:44:a3:74:c3:57:ec:30:62:b7:5c:ef:96:3d:80:
         6b:00:2b:35:9f:ff:9c:c9:a0:92:d7:72:da:23:09:a9:c6:db:
         1e:24:f6:f5:8e:57:5f:36:11:f7:0c:49:81:07:9c:39:35:b9:
         c7:b0:22:b9:b8:fa:cc:99:c3:04:69:68:c1:3b:52:eb:88:7c:
         02:08:d3:8c:6e:9b:ae:fd:79:0f:ef:32:11:80:20:19:96:f3:
         95:b4:f9:78:53:cd:e7:92:df:d2:49:c1:b1:b2:e3:35:2c:6a:
         e9:62:9f:51:b0:11:5d:98:d5:e5:fa:31:65:e9:32:f8:da:a5:
         d5:ff:18:d3:62:bb:85:28:60:f7:0e:c6:68:ae:35:ec:86:dc:
         6d:80:b1:c6:a7:7d:ac:fb:ad:4c:cf:26:9c:eb:f9:23:2c:1a:
         33:04:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:38 2024 by rpki-client on console-fra.rpki-client.org