Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/784c61cc-6477-3fe3-9eab-ff23da25acb4.roa
File:                     784c61cc-6477-3fe3-9eab-ff23da25acb4.roa (raw, json)
Hash identifier:          St9vNWvn735eaz12K148LrVK/IluR6IV53ucHfSiQoQ=
Subject key identifier:   CB:3C:1E:5D:99:9E:DF:0A:B0:AB:2C:63:9B:08:22:FE:BE:C2:FF:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7DB3FFE7B0F3072E71540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/784c61cc-6477-3fe3-9eab-ff23da25acb4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        173.12.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:db:3f:fe:7b:0f:30:72:e7:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=9f36f7b1-d512-4049-b16d-08e983079022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:db:81:da:20:a7:e7:b1:e3:c2:ae:64:d1:
                    e5:1e:39:1c:36:bc:9d:27:b9:c2:ac:8a:55:a1:cf:
                    05:69:08:6e:e7:26:81:bd:56:4d:71:be:07:66:e3:
                    99:43:88:95:92:f7:e1:6e:39:8e:58:17:44:5f:7b:
                    c2:4b:3f:05:1e:7f:6c:40:d6:c6:6f:5a:a8:32:94:
                    da:57:57:0f:5f:7b:18:26:cd:2a:9b:76:b8:76:2e:
                    1c:35:22:2a:b1:7d:27:57:36:91:d2:2e:d5:fb:55:
                    79:ac:fd:d1:f5:6a:5c:74:25:0f:a9:4f:df:f4:b8:
                    44:c6:fd:90:9f:1e:ed:cf:25:80:38:a5:c2:ae:bb:
                    ee:f2:e9:e6:f8:b3:05:87:28:03:94:ec:81:03:c6:
                    e4:78:ca:ac:97:6d:73:3c:2c:19:bc:27:a6:93:ff:
                    84:9e:cf:2a:72:90:8a:45:1d:6b:5e:d6:35:59:46:
                    39:18:2b:af:33:54:58:09:8c:6a:89:91:c4:5d:bf:
                    be:fe:c9:64:6d:61:91:33:41:05:54:f2:72:9b:10:
                    14:a3:81:cf:2d:ae:7b:ea:23:15:18:5c:90:75:a9:
                    66:95:4f:07:26:6b:5a:3d:41:82:7c:0e:55:dd:15:
                    82:fc:31:0c:6f:81:fe:7d:d5:ac:1c:c3:46:f5:4b:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:1E:5D:99:9E:DF:0A:B0:AB:2C:63:9B:08:22:FE:BE:C2:FF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/784c61cc-6477-3fe3-9eab-ff23da25acb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.12.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:08:13:73:ba:79:a0:cf:7a:92:c5:81:99:2e:39:e2:a9:c5:
         5a:65:06:10:7f:c2:c9:5f:25:5e:ce:7f:cf:3b:e3:60:8b:a0:
         b9:e6:d3:cd:03:6b:87:23:86:76:70:a0:41:ef:29:d1:5b:b6:
         3a:8b:df:19:73:4a:10:27:12:49:9e:8a:20:cc:5c:04:87:6d:
         29:6f:7e:34:8a:40:81:3b:70:f8:b1:0f:6e:d9:f7:ca:4f:ed:
         87:8b:c5:dd:f6:bc:c5:56:21:ad:a6:2e:7f:e0:66:a8:fb:34:
         9e:a1:4e:6a:b4:3b:b6:f8:44:6b:8a:e5:29:6b:89:48:01:4a:
         af:3f:56:cd:a4:f9:98:44:9d:e5:e1:85:dd:2c:88:5a:56:83:
         e2:61:42:8d:be:52:53:5e:97:ca:37:c2:ab:05:fc:96:fe:a9:
         ec:2f:56:1e:28:9f:63:4c:3c:8b:d4:18:e8:97:4d:5a:8b:7e:
         85:1c:0f:3f:93:3d:88:74:65:01:e7:6c:b9:7f:2a:00:f5:04:
         1a:f4:45:8b:39:45:7d:e8:31:c2:0a:7a:9d:c6:7e:52:45:e3:
         15:c3:7b:c1:dc:4b:a4:7a:47:bb:46:0e:d8:0f:63:c1:a4:d8:
         9f:9d:ab:34:82:ee:41:45:2b:be:ab:b5:cd:ee:9e:59:e3:2c:
         f7:74:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:28:04 2024 by rpki-client on console-fra.rpki-client.org