Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cce89e-c153-3aad-93f0-2c128bfbc835.roa
File:                     83cce89e-c153-3aad-93f0-2c128bfbc835.roa (raw, json)
Hash identifier:          B6+6Pt2b2WMflp8gS5CAYJmD/yOIPNQ+eOLY96G6rGc=
Subject key identifier:   0C:FC:29:12:FF:C0:B9:47:BE:BB:34:B0:02:C4:B3:6F:31:E8:AB:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF767381A915B0DFEC98500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cce89e-c153-3aad-93f0-2c128bfbc835.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        71.198.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:67:38:1a:91:5b:0d:fe:c9:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=0d0523cd-215f-4fa8-811a-cef42111def0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:b3:48:b1:6c:71:7e:e3:be:e1:59:c9:bc:
                    84:12:09:24:cd:fd:a0:7a:5e:cf:5e:94:b9:ab:7f:
                    f7:0d:b4:ce:84:5b:2b:ff:02:7f:e5:ef:ba:59:db:
                    c1:2f:e8:8c:1c:a7:c0:67:b0:86:da:b6:b0:f6:bd:
                    14:28:99:c3:c7:89:2a:7c:9b:f3:c8:fc:f4:5c:aa:
                    00:3f:d8:1a:ec:a6:cc:1d:13:4b:62:43:18:25:a0:
                    66:77:b7:88:10:6c:01:3d:0f:e6:1f:fb:a5:82:b6:
                    bf:ab:03:ad:1e:b4:cb:c9:99:80:c9:8c:d8:71:3d:
                    e2:07:13:8b:9f:cc:d6:23:b6:1e:a8:22:7c:7b:21:
                    4a:97:f5:04:de:46:fc:c1:2a:d6:e3:72:1c:36:6b:
                    f3:99:5a:94:94:22:36:e0:cc:92:53:b6:e2:f5:a4:
                    cf:40:76:95:41:1c:4e:45:59:9d:c5:9c:40:db:ad:
                    1a:a3:0e:0d:a6:61:81:c4:bc:17:12:27:64:d8:ad:
                    2e:fd:3f:c0:d7:1c:85:51:28:7c:d9:52:68:8a:8c:
                    69:f5:cf:a8:1b:4f:fe:6d:78:9e:61:73:27:da:95:
                    2a:eb:8a:81:4b:0f:08:bf:7c:58:fb:28:9d:15:68:
                    09:fe:b9:e4:98:02:d5:20:04:ee:da:6f:6c:5d:e8:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:29:12:FF:C0:B9:47:BE:BB:34:B0:02:C4:B3:6F:31:E8:AB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cce89e-c153-3aad-93f0-2c128bfbc835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:7e:d6:33:17:95:1e:60:a1:d2:a4:66:af:47:ce:ba:d5:
         65:3e:4d:a1:bb:3c:af:e2:cf:a1:b6:cc:35:a6:f8:8a:5c:38:
         30:ea:80:34:23:ae:35:60:37:d1:f5:4f:7e:19:9c:80:60:b8:
         61:33:f7:db:10:c4:35:7a:a2:78:6e:b9:0e:4b:6d:cb:25:9c:
         28:cb:59:b7:a3:3f:23:e4:9c:88:d2:bb:e5:a6:0c:1d:8f:b0:
         a5:eb:7b:02:e5:6b:3c:91:be:ed:72:c3:66:f8:99:2a:0d:36:
         fe:42:93:61:23:1d:7e:04:41:24:99:0a:44:67:3a:f8:5d:df:
         d7:a1:3c:ea:b1:78:7a:a9:67:32:95:30:a2:59:42:62:63:84:
         3a:52:37:88:56:0b:77:8b:73:53:a8:09:10:65:b4:ea:76:c1:
         a8:56:b1:f0:62:eb:34:4f:f5:e6:e7:59:fc:dc:f6:f1:6e:d3:
         a8:2b:b9:00:81:f9:d6:e6:fe:de:fe:0a:41:20:ca:00:5e:e4:
         1b:4a:b6:1f:49:43:c9:19:27:bc:2b:2d:51:84:09:92:85:6f:
         7b:ed:03:af:d6:5f:4b:bc:92:65:ee:3e:46:16:39:29:4c:57:
         5a:c6:9c:7b:d0:0b:3e:51:df:bf:f9:c4:da:d3:97:53:3f:ad:
         3e:2f:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:29:05 2024 by rpki-client on console-fra.rpki-client.org