Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fcbc36c-476e-394a-b644-451c0254b762.roa
File:                     8fcbc36c-476e-394a-b644-451c0254b762.roa (raw, json)
Hash identifier:          LlOQNoq3lHDGFkx2y96d22kAkpXKFV9sFKedZRt6xLA=
Subject key identifier:   BC:FC:AC:C7:E8:E4:E5:CC:CE:8B:A6:E4:0E:F9:9F:64:DA:FA:15:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7F3E12BACBD01ACD2D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fcbc36c-476e-394a-b644-451c0254b762.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        74.95.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:f3:e1:2b:ac:bd:01:ac:d2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=251179b7-d6c1-4c1b-bc96-af70fd110643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:ee:f4:2a:d0:9a:bb:5d:59:3a:ef:4b:c6:
                    41:46:0a:24:95:61:e9:6f:6a:c8:83:be:d1:18:62:
                    76:b8:37:70:4f:c5:47:b9:66:d4:f7:5b:86:81:fd:
                    f9:bf:37:d6:0b:86:03:be:9a:b4:2c:20:30:9d:1e:
                    c6:71:b0:b0:db:38:fd:7c:32:4a:6f:a2:bc:f7:f9:
                    78:d3:95:f9:24:cd:c0:99:5d:dc:63:b6:1e:81:62:
                    fe:e8:9c:ae:e8:7c:60:53:39:22:79:71:bb:34:40:
                    6c:03:75:5a:45:43:8d:52:2a:8b:83:6b:9d:43:db:
                    f8:1f:fd:ec:35:f5:d1:c7:ba:c0:92:fc:fb:e6:41:
                    8e:fe:f9:bf:1d:27:18:77:9e:c5:a2:b8:22:31:ad:
                    7e:23:e7:fa:53:41:55:8b:ac:ee:08:43:08:c7:cf:
                    31:56:3e:b8:4d:68:eb:7f:69:ed:89:ed:46:bf:d4:
                    ff:39:1e:54:04:1a:eb:fd:bd:cf:49:3f:08:55:12:
                    d9:96:56:7f:0c:21:52:98:44:8a:28:83:46:7b:91:
                    e5:53:8c:d3:54:2b:c3:70:c9:b6:a3:c3:29:49:e3:
                    08:7a:a1:93:43:b8:ce:e3:6f:90:5b:ad:7c:b0:e2:
                    a8:d1:0b:85:53:be:6a:c8:13:5f:81:f4:ab:82:52:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:AC:C7:E8:E4:E5:CC:CE:8B:A6:E4:0E:F9:9F:64:DA:FA:15:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fcbc36c-476e-394a-b644-451c0254b762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.95.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:37:74:1a:70:ec:49:fc:3b:6c:89:87:0e:b5:ac:97:02:
         d8:75:1f:52:7e:6f:45:c1:08:d6:1f:10:a6:16:17:fa:2f:ed:
         91:41:22:00:37:4f:91:e9:7d:71:d7:da:21:7b:9d:47:b2:1c:
         8d:f4:b9:7e:78:30:b0:33:db:9c:b1:18:87:8d:9e:1c:03:d0:
         07:40:af:0d:fb:c7:40:c3:bc:f4:4f:85:2f:53:8f:9f:bc:c4:
         0d:dd:e0:fc:4e:04:1e:48:ad:46:fa:25:10:05:a9:c1:c5:5f:
         7d:d3:b6:e4:6c:77:3d:fa:9d:71:28:f1:b3:43:7b:b1:2f:73:
         2e:df:c7:2a:59:86:75:70:b6:95:43:4c:be:38:85:76:79:fd:
         c9:33:48:76:76:87:be:a1:c4:f0:83:d4:f5:e6:7c:3b:38:53:
         4a:46:53:3b:85:3f:79:e5:77:77:c8:69:b6:71:c0:0d:77:5c:
         72:4a:aa:8a:7a:89:ef:3c:7e:7c:56:b0:aa:83:c7:51:a4:6a:
         6e:93:90:c3:11:13:d9:33:8e:78:06:12:51:8c:f9:10:43:48:
         ed:12:29:ef:9e:02:01:85:d5:5e:f8:76:26:41:50:bf:5c:2a:
         8e:42:f5:c8:0e:01:2d:9a:bf:c9:c6:84:ee:6e:1f:81:17:a4:
         cc:1f:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:21:40 2024 by rpki-client on console-fra.rpki-client.org