Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa
File:                     9607aa8f-5b06-3fde-9184-4f046ccf8898.roa (raw, json)
Hash identifier:          IZ+pfDUwnOOqFEXIc2Vr4uvqTb4iwo+gvElf+0L9F9I=
Subject key identifier:   10:0E:F4:6B:02:64:B1:EE:7C:58:EE:86:D8:07:D8:54:FE:58:06:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C64D205A78B71A73104D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        174.168.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:4d:20:5a:78:b7:1a:73:10:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f32a2dca-a83e-4db6-81be-6bc75c125ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:df:92:79:b5:fa:7f:f2:05:97:30:12:5a:
                    ed:15:f5:8f:fe:a1:b8:6a:33:a5:fc:bc:86:19:e0:
                    58:b3:3b:41:6c:ba:a9:be:56:56:71:1c:c1:01:ea:
                    25:ae:9a:8e:5d:e0:17:1f:6a:e3:8c:94:18:ac:b9:
                    ea:35:a6:ca:b3:74:56:61:90:db:d8:c4:fb:db:30:
                    8d:7f:95:f1:2c:60:42:9d:cb:00:e3:b2:a3:72:42:
                    0a:45:f5:05:3b:83:b5:67:b9:f4:a6:55:69:8b:50:
                    2c:8f:9a:28:88:84:60:0b:04:36:78:25:ab:4b:34:
                    8d:5d:c8:f8:8d:41:fe:ca:6b:d0:41:60:42:72:ae:
                    79:20:f3:e1:8f:9f:80:ec:a0:61:7b:f0:08:78:44:
                    88:0b:43:9d:5f:d2:55:99:0a:4e:51:ab:88:58:75:
                    c3:49:49:91:44:d1:06:d3:04:73:56:d5:e3:c3:3a:
                    1d:08:3b:4e:68:2b:31:66:de:62:6c:a5:f5:9f:6c:
                    c0:fe:ad:74:e2:46:8f:eb:17:5c:64:c9:02:b0:d0:
                    82:16:64:f8:7b:9a:4f:5a:0b:ae:fb:ea:9d:fe:77:
                    e5:39:89:6b:29:00:aa:a5:81:69:90:ce:9e:c1:df:
                    ec:5e:5f:be:d6:a9:c5:f8:2d:02:89:f0:13:a0:0c:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0E:F4:6B:02:64:B1:EE:7C:58:EE:86:D8:07:D8:54:FE:58:06:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:73:e7:8a:e7:d0:6d:1b:ec:27:93:2d:78:bc:4b:d9:40:
         28:b0:e5:2d:c8:4b:c2:42:81:57:4c:ba:28:67:52:1f:2c:80:
         38:cd:f2:d9:81:f2:2b:f6:4d:f2:48:48:44:f3:b9:61:6b:ef:
         66:96:73:07:c7:18:68:82:eb:fe:06:f8:d2:a5:b7:5a:2d:98:
         b9:9f:3b:94:ff:52:f7:59:4f:5c:1d:55:2c:b5:5a:1a:8d:3c:
         b4:dc:a1:98:74:52:49:fb:80:25:84:2a:51:27:f9:8d:5a:f1:
         44:70:6a:d6:67:6c:8b:16:5f:ad:7a:49:08:fd:02:3f:51:e5:
         f0:2b:ea:22:83:4d:1c:73:1f:9a:4c:38:8e:45:fd:55:a8:09:
         61:e1:a3:1b:af:de:d3:1e:c9:9a:d5:75:0c:29:4f:44:dc:ba:
         74:ea:06:4e:d2:34:fd:54:e3:40:77:25:f4:ae:ff:9f:cd:9f:
         d6:76:aa:e1:0b:93:ff:3c:ff:88:e7:1c:a9:e0:ee:c7:b1:97:
         96:c4:f4:ce:b2:59:e4:1e:d9:32:21:c9:7e:55:d5:91:15:40:
         5d:b5:cb:eb:fb:f6:87:32:2c:0c:fc:2d:61:89:87:8c:e5:e0:
         b7:b7:56:33:19:21:fd:bb:f1:49:72:df:8d:cf:64:cc:e9:9b:
         0b:76:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:11 2024 by rpki-client on console-ams.rpki-client.org