Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8067e06e-de08-346c-bf9f-4e2b0b2b105e.roa
File:                     8067e06e-de08-346c-bf9f-4e2b0b2b105e.roa (raw, json)
Hash identifier:          Q+Qwv757EqRKUfQiXmxlaq70ZceAZnr+LqF9cAhwBws=
Subject key identifier:   DF:B8:C0:9D:0B:5D:0E:4A:55:FE:F3:E6:33:C4:CB:FE:21:16:56:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9C00A58D95601B7A858200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8067e06e-de08-346c-bf9f-4e2b0b2b105e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        71.57.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:00:a5:8d:95:60:1b:7a:85:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=70dc17ac-7a53-4ac4-9f65-9643450bcafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:8f:b5:fb:57:ee:0e:5d:3c:f0:0a:2d:ed:
                    c9:e1:2a:30:e0:84:ac:39:fe:ae:db:20:e8:40:1c:
                    af:6f:9a:11:a6:e3:31:19:ef:6a:17:82:40:40:10:
                    6d:d2:c8:7c:b5:a0:95:91:b9:43:0f:f1:35:84:4c:
                    2c:dd:7f:ee:22:e2:9d:46:6a:d7:4d:03:7c:17:fa:
                    1e:4b:96:f5:13:81:8b:73:bf:4e:2e:36:d3:cf:a3:
                    65:b0:c9:eb:bc:4f:dc:cf:bb:4f:5b:a6:0c:2c:8c:
                    a8:e4:31:ff:28:bc:47:22:70:6a:4d:b6:b5:2d:16:
                    cb:8c:31:dc:17:ee:dc:81:bb:76:78:74:15:11:27:
                    c3:b1:c2:42:e1:11:c6:c5:d1:c3:a9:9a:0f:91:d7:
                    12:0d:80:a6:65:f6:5a:d9:c2:c6:9c:f4:ab:0b:cf:
                    45:82:7e:7e:bb:c7:d0:a1:8a:2d:ab:09:c3:b1:ff:
                    e5:e4:aa:d2:d3:f6:71:6f:2a:df:a8:6e:ce:ab:aa:
                    3d:e4:86:42:2c:5c:e7:6a:02:2a:21:d5:ef:d5:58:
                    a8:13:6b:8a:8a:46:42:e0:c3:36:b5:83:6d:dd:9e:
                    ae:10:0d:30:fd:34:0c:1e:4c:01:44:b7:16:2b:5c:
                    22:2f:3a:7b:8e:ad:1e:81:37:15:77:b0:de:8a:d1:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B8:C0:9D:0B:5D:0E:4A:55:FE:F3:E6:33:C4:CB:FE:21:16:56:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8067e06e-de08-346c-bf9f-4e2b0b2b105e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:90:71:96:7d:4b:c9:9b:82:0f:4b:23:bb:0e:b0:24:31:
         cb:cf:ca:08:d5:ad:cd:72:86:bc:b1:f7:df:40:43:70:28:bf:
         2c:cc:cc:77:f4:14:06:59:8e:d5:c9:d4:28:3a:df:35:c1:80:
         42:21:3c:55:07:d9:65:28:b7:ab:04:43:a4:6a:c6:3f:53:37:
         65:64:71:3d:a6:a2:e8:c1:ef:9d:0b:72:c3:65:8f:30:e2:6f:
         2a:3a:94:f9:36:31:2e:b9:7c:ab:0f:65:fe:fc:e9:bc:94:39:
         95:10:ee:49:62:cd:2a:fa:d6:39:b6:22:4d:9b:f8:18:db:3a:
         1f:98:da:98:5c:8a:cd:cd:52:a0:1f:c8:a4:24:bd:04:e3:68:
         1e:35:fa:01:53:4a:3b:c2:07:8a:46:b5:ac:1e:8c:53:e8:91:
         bf:f0:91:fb:0c:43:47:af:af:00:b0:cb:d9:18:04:2c:42:0f:
         af:fe:c8:d4:56:70:de:ec:12:38:1f:cb:33:ed:95:b4:1b:31:
         20:a0:d8:2e:ea:de:93:f5:29:10:0e:81:3c:7f:c4:c7:31:3e:
         d2:ca:f5:2b:16:0c:3c:cc:fb:a2:87:e9:9d:6a:45:e0:a7:48:
         a5:90:0a:a5:72:94:27:7a:c2:6c:aa:8d:d1:49:21:b1:c1:bc:
         93:66:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:06:03 2024 by rpki-client on console-ams.rpki-client.org