Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79321d58-0b3e-3d2a-8c97-dfccd4862c16.roa
File:                     79321d58-0b3e-3d2a-8c97-dfccd4862c16.roa (raw, json)
Hash identifier:          da5ssEFmTQVq7N8/G6jyRCUeNk3zpiJ4vasPF6kVwGs=
Subject key identifier:   58:29:B4:99:C8:EB:82:69:CB:9C:50:C7:0B:B4:FB:0E:0A:7C:57:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7EC1C75BB701A7DDE1C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79321d58-0b3e-3d2a-8c97-dfccd4862c16.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        174.170.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:ec:1c:75:bb:70:1a:7d:de:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6b8f509d-a63b-474e-936c-b4f25dd7d6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:67:7c:a6:e8:08:ae:8d:95:3e:70:dc:4d:
                    8a:8b:f1:f9:87:68:14:90:c6:b4:4a:d4:6c:9c:04:
                    6a:a2:e2:1c:73:27:08:9d:3d:4b:b0:e2:87:24:80:
                    ff:29:9f:3a:61:4a:50:a4:ff:f6:d2:49:a2:fb:ae:
                    b7:4d:a8:64:49:e8:0f:70:08:d3:3e:4a:16:22:f8:
                    cc:c4:37:98:61:f5:5a:75:31:c6:5f:ab:e9:d5:1c:
                    1c:4c:77:90:bb:a8:7d:e7:0e:d5:76:1d:ed:6e:9e:
                    f7:a8:a9:45:3b:f8:53:be:e7:3b:dc:15:60:19:a9:
                    eb:36:9b:35:31:e9:37:a0:b8:a3:15:84:c3:79:f0:
                    21:77:35:75:ba:c8:f9:40:f0:81:86:bf:58:bb:7f:
                    8c:ed:6b:bd:12:a5:7f:26:3e:9c:c0:ae:fc:fe:66:
                    da:96:b1:4c:d1:72:fd:b5:13:95:c8:2c:2f:92:91:
                    05:cf:da:93:46:98:a0:61:4b:62:e9:b0:0a:1e:89:
                    f1:20:1e:8a:5a:b7:a1:ad:74:fd:5f:59:d3:4d:de:
                    4c:a3:3f:df:dc:79:89:7e:27:3b:9f:2f:58:19:21:
                    4f:d1:44:d6:61:5e:e8:b9:e1:84:88:17:37:52:fb:
                    61:0e:a5:65:93:fe:e7:4e:01:ab:d3:34:65:ac:79:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:29:B4:99:C8:EB:82:69:CB:9C:50:C7:0B:B4:FB:0E:0A:7C:57:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79321d58-0b3e-3d2a-8c97-dfccd4862c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:ac:d3:6b:cf:ef:cc:d3:0c:06:d5:a2:a5:34:be:c7:23:
         44:e4:db:70:2c:1c:4d:4b:2d:8b:2c:c1:b2:d6:dd:8b:bb:f3:
         3f:3d:37:67:5a:1a:3b:7d:23:27:07:d5:fe:c2:62:c8:40:70:
         fa:8a:b7:22:a9:77:c9:39:ef:33:7d:89:81:0f:a5:e0:9a:dd:
         85:62:9f:58:05:1c:e1:ac:8f:f2:41:39:d5:7d:64:f6:ed:5b:
         04:00:80:70:a6:79:b1:e8:41:d4:a7:5f:f0:fe:30:7d:65:e5:
         f6:cd:77:b2:b9:61:4d:13:9a:39:e5:7f:ca:51:2a:ac:63:b2:
         90:c7:a7:a5:94:4c:d0:41:9b:48:c7:0f:b1:fe:be:42:b9:12:
         e5:28:d7:81:22:29:7d:cb:cb:2a:18:4f:b5:ec:24:3c:2e:e1:
         dc:c6:0c:a3:9c:af:fc:47:57:8a:12:48:9a:4d:57:c8:33:bf:
         f3:f0:f0:eb:f0:0e:fe:0a:bb:13:aa:3e:c3:15:e6:ec:0e:0f:
         64:d4:1a:41:ab:86:b3:43:dc:4a:14:5a:fd:c6:ab:40:15:86:
         11:3c:86:0e:87:64:f1:c5:55:46:a9:30:6e:e4:b4:90:43:76:
         29:75:af:d3:43:33:11:d0:a5:a7:81:b8:bc:d9:77:17:e3:af:
         16:b2:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:39:02 2024 by rpki-client on console-fra.rpki-client.org