Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bba49f1-5c98-3aac-98ee-c2b7c0899042.roa
File:                     6bba49f1-5c98-3aac-98ee-c2b7c0899042.roa (raw, json)
Hash identifier:          1EdGv3i/55KuPfrgs2iRBLfYAJ5UlKBA7Rv8LrMPWUc=
Subject key identifier:   F8:9B:4A:F9:05:7E:4C:CA:AB:84:CA:AC:59:30:32:73:3D:F1:56:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D03EBDE9DBC9338DD3300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bba49f1-5c98-3aac-98ee-c2b7c0899042.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.160.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:03:eb:de:9d:bc:93:38:dd:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b93fc85b-a6d3-4f56-b9d1-9caca709666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:ca:4f:7d:90:90:e6:6f:c4:50:86:3b:82:
                    c3:48:db:59:68:13:58:78:68:70:4b:15:d1:bf:a8:
                    6c:39:c3:b5:be:34:3d:fd:d3:7d:6a:6c:e8:49:15:
                    ed:a1:74:82:9b:8c:b1:ab:60:74:3c:c2:28:f9:9a:
                    88:5b:e0:b3:6e:11:ba:e7:ee:e8:b6:bb:0f:0a:2d:
                    8a:47:d6:b6:90:25:67:af:09:71:5b:82:10:c8:a6:
                    ed:9b:57:9d:72:07:d7:34:66:1c:f2:84:73:33:49:
                    52:37:97:e0:f1:a0:91:cc:21:18:1e:4a:76:87:a0:
                    dd:ad:b4:a8:e2:54:dc:56:13:67:bc:95:af:6f:f1:
                    ba:dd:9f:c0:1b:f4:57:1b:b7:c9:49:7f:9e:22:73:
                    bd:da:b7:e7:d0:84:31:1b:d8:78:cb:71:96:10:13:
                    83:cf:8d:a5:c7:c1:ca:f2:1d:ad:f4:b5:76:df:a7:
                    41:01:c9:c4:e2:d9:fb:da:b2:61:c6:b9:29:7f:94:
                    ab:91:21:53:ac:36:00:fc:80:1d:6b:fe:5e:8b:00:
                    55:40:e3:b8:50:5c:b5:80:15:f9:d7:e2:ed:d7:d1:
                    13:d0:97:2b:a4:4c:61:41:2d:6e:07:9a:81:4f:1e:
                    ff:1e:7b:a5:b0:4a:7e:3c:8c:32:74:c2:25:fc:3c:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9B:4A:F9:05:7E:4C:CA:AB:84:CA:AC:59:30:32:73:3D:F1:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bba49f1-5c98-3aac-98ee-c2b7c0899042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.160.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:80:26:cb:22:35:b3:ed:42:c8:0b:9d:93:af:30:d4:5f:
         86:d3:68:5f:4a:b4:f4:b9:b6:19:52:0c:45:00:5b:8c:bc:76:
         ad:15:fc:e0:f8:b1:cd:3c:34:79:4a:d1:3b:30:64:a9:cc:63:
         73:28:aa:b9:0b:91:04:a6:37:9f:c8:87:4c:c5:21:73:06:aa:
         f7:84:8b:38:71:d1:dd:77:18:b3:31:31:18:0c:74:c7:78:40:
         43:a8:4a:d1:8e:bf:1b:03:77:c5:a4:ff:5c:32:d9:9c:71:d8:
         c6:b9:be:76:ed:49:a4:29:03:41:12:04:5d:e2:f3:fb:10:76:
         69:b4:af:df:27:01:d4:81:b1:50:b7:b3:ff:6b:e2:af:8d:ea:
         93:98:e1:3f:07:cc:dc:ad:8e:b7:86:aa:c5:2c:51:0a:4e:d6:
         d1:2d:4a:03:d8:3a:89:8e:aa:30:07:65:ab:fd:96:88:b3:e2:
         01:26:e4:82:61:58:23:6e:5b:91:d7:13:9f:5f:8a:d6:de:87:
         83:56:74:be:f9:73:3c:3c:30:9c:af:13:17:d4:c8:38:23:11:
         cf:21:88:fd:c9:83:65:e2:09:91:c5:27:70:b1:f9:0c:82:ef:
         2c:c2:77:78:66:46:a0:60:60:21:9d:ac:99:8a:4b:e8:00:67:
         a9:58:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:28 2024 by rpki-client on console-ams.rpki-client.org