Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fd3cae9-64f7-3158-bd07-a8126f79b10f.roa
File:                     7fd3cae9-64f7-3158-bd07-a8126f79b10f.roa (raw, json)
Hash identifier:          V4d//AX8ezm7U+1G4lkJ1TYpOsKVLbrt4IX3+tE3I8w=
Subject key identifier:   B3:B3:04:47:AE:25:3B:A8:D6:7F:9A:65:33:27:39:C4:EA:D8:7F:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D0B58FBE969F82082CD50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fd3cae9-64f7-3158-bd07-a8126f79b10f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.180.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:0b:58:fb:e9:69:f8:20:82:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=355b91da-32ca-45a1-8a5b-8d77bda6be34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:b4:24:18:24:e4:2a:39:65:aa:b5:08:41:
                    5c:51:13:85:2b:0b:50:2e:0b:42:0e:15:a6:6f:f0:
                    5d:f1:70:72:14:10:b5:56:6b:57:a6:70:03:fd:77:
                    62:92:53:7c:45:23:c1:33:15:88:28:1d:ef:5f:de:
                    78:e3:d6:c9:fd:eb:a6:cf:ff:93:d5:d1:cf:d4:34:
                    4c:cd:5b:43:a5:92:70:67:80:f1:79:4e:7a:72:66:
                    7d:af:5b:2f:46:89:a5:d4:08:ff:5c:7d:17:5f:bf:
                    51:b3:38:f7:ea:d8:df:7e:97:29:13:b1:47:ad:64:
                    70:73:37:67:87:c6:2e:eb:a6:69:cb:39:21:72:60:
                    68:b0:1e:fb:de:50:5d:8e:55:b4:df:1a:27:10:b2:
                    54:80:a2:0d:9e:07:4d:46:fb:df:07:43:8a:d2:94:
                    1d:c6:5e:92:ad:ee:89:c9:3d:0e:8d:94:c6:f7:01:
                    cf:2a:4f:3d:3b:5a:7b:0f:0c:f6:14:9d:f6:d0:e6:
                    7c:cf:bb:de:0e:0c:e5:56:81:2f:b9:b3:00:ac:2a:
                    7d:cb:79:21:b6:54:bb:fd:8d:9c:2c:8e:f6:6a:40:
                    7b:4b:a1:9c:96:e9:a1:39:93:77:36:1a:7e:e5:1f:
                    f9:a5:df:18:5d:2f:65:63:c1:5c:a8:29:86:ea:b6:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:04:47:AE:25:3B:A8:D6:7F:9A:65:33:27:39:C4:EA:D8:7F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fd3cae9-64f7-3158-bd07-a8126f79b10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:47:51:70:1d:d9:c5:4f:18:4a:91:fe:94:c2:1f:3f:87:
         59:aa:92:d6:c6:21:f9:ce:dc:83:04:e3:03:42:fc:56:f0:07:
         c3:ae:b4:14:86:6b:29:a8:f8:ce:c9:cd:c0:79:c2:aa:b6:1d:
         3b:c6:8c:c1:5a:89:24:39:47:e0:a4:f4:e7:ac:57:64:9f:67:
         4c:fc:26:82:f6:18:2a:fd:ef:1d:39:de:e5:7b:95:e6:c4:66:
         06:5e:1c:8a:41:90:a1:51:0a:37:b9:16:ed:1c:ff:30:f3:c3:
         8b:71:b2:a1:94:b8:6d:e0:19:a1:38:c5:b4:97:7f:1f:e2:bb:
         9f:76:6a:48:70:0e:da:47:b3:da:e3:a2:bd:88:83:c0:d6:a9:
         06:75:39:88:85:5a:9e:dd:75:d3:47:c4:48:cf:45:10:a9:00:
         0c:b6:0a:92:b8:5c:1e:81:fc:71:40:83:53:0c:dd:33:99:9a:
         4b:7b:ae:34:b8:24:33:6d:39:bd:79:02:42:8f:48:32:fc:3f:
         00:84:71:cc:40:98:2e:17:bf:55:62:35:9f:39:f9:9c:c3:77:
         8c:6b:2b:e6:86:3f:49:ed:79:65:d4:bb:3b:47:1e:90:94:e9:
         db:2c:fb:c9:9c:b1:b2:8b:61:f4:d3:bc:1f:ff:21:fd:49:e8:
         02:3b:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:03:52 2024 by rpki-client on console-ams.rpki-client.org