Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b72c18c-1f02-35ba-95d9-c33f9aa198a2.roa
File:                     7b72c18c-1f02-35ba-95d9-c33f9aa198a2.roa (raw, json)
Hash identifier:          hzgQundo1jQ5pKPfmvgd3GKqsvmf9T1IEwKXHZU+DRA=
Subject key identifier:   FE:CE:04:75:2E:DC:10:AB:BE:D3:02:3A:6D:1B:73:14:62:E1:B5:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C75E1B3016AA0F6F492980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b72c18c-1f02-35ba-95d9-c33f9aa198a2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        107.4.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:5e:1b:30:16:aa:0f:6f:49:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cdd116f5-7f07-4be3-b1d4-7f43d92090fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:be:92:17:e6:6f:a4:de:b8:5c:8a:67:f1:
                    aa:3e:ea:d2:b4:0a:0a:33:74:97:fb:1f:42:40:45:
                    1a:a9:4f:8b:10:e5:f0:35:6e:f3:88:79:2f:18:d9:
                    d7:a7:6a:c7:19:7e:e2:54:39:c1:1b:47:93:89:57:
                    dd:d7:fc:10:26:98:54:61:e6:7f:a7:45:26:c7:de:
                    1f:18:3e:59:2f:12:7e:3e:e1:c9:62:48:b0:d7:fb:
                    ef:1b:a7:ee:cd:db:b5:c6:ef:c1:1c:f1:e4:11:d6:
                    8b:d0:22:5f:8f:ad:9b:97:78:79:ab:37:e9:9b:b6:
                    8f:4a:5b:e8:d1:8a:26:43:68:36:a6:2a:fc:76:8a:
                    1e:3e:83:c3:97:cd:3c:fd:4b:cc:ba:eb:4a:81:a1:
                    34:7c:b9:12:1a:7f:d9:25:0c:0d:53:fb:5b:72:7a:
                    f2:fa:e1:ba:7c:37:4e:a5:47:5a:df:ee:87:79:06:
                    e0:48:60:b5:97:44:2c:7a:49:02:9c:44:69:4d:e8:
                    1b:98:dd:a1:d3:cf:6f:af:e0:dc:7f:dc:a8:26:7c:
                    62:ab:b1:18:e5:92:96:5b:b7:de:e7:4a:b7:e2:e3:
                    b5:0b:5e:53:a5:f7:0c:5c:eb:df:79:f1:a0:0d:42:
                    38:c5:3e:ce:c8:c4:aa:44:bc:f2:cd:9f:d3:6d:e2:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:04:75:2E:DC:10:AB:BE:D3:02:3A:6D:1B:73:14:62:E1:B5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b72c18c-1f02-35ba-95d9-c33f9aa198a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:1f:9c:e7:3c:d9:db:0d:73:7d:4b:55:21:95:12:c7:ce:
         63:52:99:eb:5e:1c:d7:3a:2d:55:3e:8b:3f:76:a8:ff:51:7e:
         72:a5:d9:6b:48:8d:7d:f7:56:b5:b4:83:53:1a:c5:d6:8f:5a:
         6c:e4:87:25:80:78:82:f0:6e:4f:ae:a8:11:30:3f:73:a0:c7:
         ff:24:f3:06:43:2a:69:f7:fe:9a:e4:13:13:ae:f6:78:58:b2:
         b4:82:dd:a2:cb:f2:2b:9d:53:54:0f:48:34:f8:ed:9b:7e:e3:
         e4:75:ac:b9:a1:35:b4:ee:5e:f8:d0:2f:6b:a4:59:8d:f4:13:
         65:e6:5b:95:bf:b3:28:09:1d:cc:ba:6e:e3:1d:23:c9:81:e3:
         f7:06:5f:8a:70:00:2c:fb:a4:f4:0c:9b:09:d8:c0:de:53:a9:
         90:50:83:47:4e:9b:f2:99:64:82:c4:44:5f:44:de:5a:5a:d1:
         04:25:47:73:9f:4d:6a:31:6c:d2:60:06:00:07:0f:f8:7c:7c:
         df:dc:46:f9:c5:51:e6:28:0c:d3:2b:6f:90:89:3b:f5:33:c3:
         71:e5:63:6d:43:64:99:d5:49:df:bf:ea:84:18:d7:44:0f:26:
         48:8b:f2:51:1d:b7:bf:f1:2f:7e:16:2d:0d:47:ce:34:94:c0:
         fe:5d:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:06:56 2024 by rpki-client on console-ams.rpki-client.org