Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea5ed99-1fce-3305-91b5-229f63e31a40.roa
File:                     8ea5ed99-1fce-3305-91b5-229f63e31a40.roa (raw, json)
Hash identifier:          KkRqDpj9YRRlqX2q7s22mnR9oSxWVP++BbHJETZyOLQ=
Subject key identifier:   40:86:C0:A4:A2:6B:20:EB:C7:60:A6:E7:CB:2D:ED:07:10:D6:6C:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CFD4BB94B236EE84AB673500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea5ed99-1fce-3305-91b5-229f63e31a40.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     7015
IP address blocks:        174.168.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:bb:94:b2:36:ee:84:ab:67:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=4b3448a6-faf4-4679-9f19-24b3cec10b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:7e:18:85:7e:f2:c7:e7:e7:fa:7c:28:df:
                    d3:2d:78:ab:d6:d8:31:eb:e1:10:e6:87:0b:39:4b:
                    91:74:48:57:f8:63:82:0d:bf:9c:39:85:ea:65:61:
                    0c:6f:e2:a9:86:c7:ba:c5:aa:af:b0:3d:80:15:9c:
                    f3:92:e3:8b:68:98:74:35:cd:38:7d:58:cb:64:8d:
                    5b:6c:cc:3d:1e:70:cc:07:02:c5:ad:ec:7b:07:41:
                    fe:c6:f6:ba:c8:4a:78:b8:12:97:5f:a8:5e:89:70:
                    f4:ff:16:eb:fa:cc:d7:ae:94:9a:a6:9b:26:b7:cf:
                    18:55:43:74:d4:9b:9b:fb:ac:4e:39:ef:48:e7:7d:
                    cb:ff:a2:91:ba:44:8e:4e:cf:4e:06:09:4d:5b:90:
                    16:cc:2e:10:18:01:82:66:fa:02:1e:f4:5a:9f:a8:
                    27:a7:28:af:3b:24:69:a8:51:ba:ab:82:d7:04:6a:
                    dd:df:0b:ae:51:43:f6:78:ec:06:58:db:70:b3:3f:
                    f7:ca:c8:29:42:bc:a1:33:29:ea:54:43:7b:13:28:
                    ae:c0:95:1b:31:0e:21:81:07:30:aa:f8:72:42:8f:
                    7a:8e:32:3d:86:72:de:68:17:cc:8f:5a:26:e6:fe:
                    81:24:4b:75:f8:19:8e:84:26:53:d6:67:e6:69:1a:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:86:C0:A4:A2:6B:20:EB:C7:60:A6:E7:CB:2D:ED:07:10:D6:6C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea5ed99-1fce-3305-91b5-229f63e31a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:8c:6f:05:33:1c:d5:ef:9d:56:4b:65:65:47:fe:c2:26:
         30:92:db:f2:4a:e4:24:57:e5:3b:5b:ab:ea:11:9b:7e:c1:e4:
         42:97:de:23:9a:b9:ed:bc:78:9b:34:30:c8:a4:3c:24:27:99:
         d8:98:42:95:37:c9:14:9a:04:e8:d4:fb:9a:47:c6:f8:d4:1a:
         fa:f5:75:53:c0:69:69:41:aa:72:b3:c5:d3:70:b1:e2:d6:a2:
         a4:21:9d:3c:46:39:d6:22:e1:3c:a4:69:bc:c5:9e:71:f1:88:
         0c:9c:ab:98:4b:f6:7a:89:c8:3c:15:7f:ac:a7:69:61:37:78:
         b3:0c:c2:19:46:13:ca:99:af:13:c4:8a:c0:e2:7d:51:5c:3a:
         7c:26:8b:bc:8f:82:7e:3f:2e:bc:57:4e:42:e6:b3:00:d7:40:
         2b:2f:a3:ae:73:6f:6e:b2:8d:7b:e5:53:2d:b7:cb:f2:a1:bd:
         2c:f3:93:93:13:c3:23:29:3b:39:7a:ba:2f:cb:3c:ae:82:d8:
         fb:3f:04:8e:53:5b:0e:ee:51:26:09:db:a8:79:36:ff:3c:dc:
         7b:a2:11:86:f5:ab:06:fa:a9:55:a1:95:f2:ae:57:4e:d7:16:
         c2:4b:e3:0b:6e:8b:ae:75:18:49:72:0a:3c:1f:24:a4:f9:76:
         41:60:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:05:12 2024 by rpki-client on console-ams.rpki-client.org