Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71ea4953-c06b-313d-ad60-04a02480ea73.roa
File:                     71ea4953-c06b-313d-ad60-04a02480ea73.roa (raw, json)
Hash identifier:          L9qnXb2uwk400/bUUrsNEBBSqrZtog2Y/rCA6g2uttM=
Subject key identifier:   DB:42:4B:5C:1E:37:7E:1D:21:CE:D5:7A:62:23:6A:7B:63:72:52:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5F1E733838139CDAFCBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71ea4953-c06b-313d-ad60-04a02480ea73.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        67.189.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:f1:e7:33:83:81:39:cd:af:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cf3be81a-beeb-4959-b763-c5ebe33bfb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:f7:06:1b:ab:57:64:ea:f0:47:4e:ff:8e:
                    a4:3f:c1:db:e7:76:bb:bf:b2:2d:5c:79:ec:75:2e:
                    96:5f:7c:15:4f:c5:e5:5e:5e:e3:67:7a:07:ba:8a:
                    37:77:04:b6:c2:1f:cf:b3:54:60:9d:be:36:ab:10:
                    9c:9a:76:91:09:65:55:0f:70:5c:e6:06:1a:ba:c3:
                    26:a8:0d:9a:a9:98:ee:56:71:a2:0d:6a:1a:cc:10:
                    1c:f4:fa:31:30:47:22:09:1b:04:b0:cf:e0:c6:f8:
                    eb:fb:8e:de:d9:7d:99:22:cc:b2:c6:b9:fe:12:59:
                    e4:c4:c1:91:2c:10:ea:d0:22:3a:12:d2:d7:23:25:
                    50:05:43:02:b6:85:f1:18:03:18:22:08:c2:b2:f3:
                    0d:44:f8:d3:5a:07:2a:06:6e:b9:ca:98:75:8e:43:
                    88:2b:5c:0e:bf:18:60:3f:13:5c:b2:bf:37:65:cf:
                    82:79:30:30:83:29:8f:36:22:9f:49:07:d1:e8:6d:
                    76:09:23:ec:4e:f7:b0:5e:32:af:40:83:72:3e:ee:
                    1f:c6:d6:96:b3:cc:09:79:2a:f8:c0:16:42:4d:de:
                    a3:7f:c8:95:4f:8a:f2:b8:1c:b3:b3:26:18:1a:ba:
                    0a:e7:3c:1b:23:3a:69:93:51:5b:29:05:b8:fd:3a:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:42:4B:5C:1E:37:7E:1D:21:CE:D5:7A:62:23:6A:7B:63:72:52:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71ea4953-c06b-313d-ad60-04a02480ea73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.189.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:21:bd:47:88:67:e5:76:9d:e4:2a:22:49:4d:a5:c9:e3:bf:
         3d:57:f9:b2:3c:d8:6a:5a:fc:3f:62:f0:68:50:5c:9e:5a:08:
         e8:af:d6:ad:89:b7:6a:52:b3:99:6b:dd:a5:5d:29:c9:5b:a5:
         3c:6c:47:fb:9c:37:11:71:61:e3:c2:86:25:38:01:c1:ee:8f:
         c1:98:55:14:ba:a6:96:6c:da:02:d5:99:eb:54:bc:28:85:c2:
         9d:9b:80:5a:a7:fd:94:79:5a:79:8d:6a:ae:a4:b8:a6:d2:e1:
         3a:49:56:ce:f1:17:55:18:c0:92:10:ee:32:7b:3a:79:c6:21:
         6b:f2:5b:f5:26:9e:11:39:81:82:55:8c:81:6e:66:98:41:6e:
         1e:fb:f3:c3:09:0d:6f:22:e8:e0:13:0f:c0:0f:90:95:36:ec:
         2e:ba:0a:24:91:fe:fe:40:f3:72:d8:d7:e5:fd:e3:78:b0:8e:
         67:b2:dd:02:46:5d:a7:10:06:a3:3a:58:30:22:44:9d:91:8e:
         d0:e4:8a:e0:04:9f:70:c0:00:f8:02:9c:4f:a7:c6:c8:7d:bc:
         b1:a6:56:de:ea:22:78:49:41:90:82:6e:ab:69:33:38:8b:57:
         4a:c3:44:c0:1f:dd:8d:b8:ee:f0:ea:3f:3b:ab:c5:42:9e:f1:
         6a:23:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:00 2024 by rpki-client on console-ams.rpki-client.org