Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa
File:                     99dc2bec-147a-3ad4-a102-099edf063898.roa (raw, json)
Hash identifier:          +LrxuljFXrLTR77bHeRrmLZzxO4027yM+tr2iL81jj0=
Subject key identifier:   57:60:16:2F:4C:3A:5C:CA:65:1F:64:71:FD:94:8A:D2:E1:8B:6E:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7BDD634E0BA6EB2DB9640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        71.195.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:bd:d6:34:e0:ba:6e:b2:db:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=99f1ce7a-9452-47ce-bd02-205248326dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:58:9d:ba:1c:34:e2:6e:ba:ec:51:e1:12:
                    9a:a3:cc:73:90:10:71:1e:5f:43:ca:40:ee:64:90:
                    d3:3e:54:24:c5:bd:a1:89:58:d4:ce:b1:af:35:ad:
                    ba:b5:72:7d:b9:49:5b:ad:a5:4c:d3:e6:a8:c0:ab:
                    29:8a:6c:c7:44:77:82:d5:ce:07:25:3a:4e:0d:9f:
                    2d:d2:f5:28:c4:c4:22:60:3b:6f:b6:4a:23:29:bb:
                    43:5e:65:dd:44:36:97:c3:8a:e2:77:60:79:05:83:
                    81:5f:31:77:97:bc:d0:67:01:32:b0:c9:66:59:6d:
                    d4:a7:41:ec:e3:10:18:13:df:b1:97:2c:e8:aa:b9:
                    bd:bb:91:29:b8:63:5b:0d:74:5b:7a:3b:5a:45:20:
                    e2:5c:c7:75:fd:95:34:2a:aa:65:17:17:ee:a8:a9:
                    a1:90:7c:04:e6:1d:5a:2b:90:a9:5b:14:2f:30:e7:
                    09:98:91:0c:3c:a8:7c:a8:4c:03:ca:f0:cf:9e:34:
                    5d:a2:8b:70:be:70:1f:c2:32:cc:c6:26:a4:16:aa:
                    f1:b6:b0:2c:a8:cd:69:3f:b5:c1:2e:42:0a:0a:f5:
                    a1:b5:bd:19:26:96:d9:f5:00:d8:00:34:55:10:d0:
                    ea:25:a5:aa:7f:06:f0:15:bc:c6:58:33:36:73:7b:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:16:2F:4C:3A:5C:CA:65:1F:64:71:FD:94:8A:D2:E1:8B:6E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:b7:fd:26:fd:18:04:cb:44:74:6d:7f:f9:55:7b:f0:b6:
         d3:13:b5:b2:c4:fd:a0:65:95:87:68:6b:84:ac:c6:09:27:e7:
         c2:15:4d:49:f3:37:9e:08:00:9a:16:cb:96:be:00:d6:8b:82:
         03:ef:21:e0:2a:3e:ae:af:8f:97:fc:11:2d:3c:8e:af:61:0e:
         5f:61:aa:bf:7f:8d:f1:68:28:da:d0:09:03:8e:58:85:13:08:
         b9:72:38:32:d3:3a:37:0d:a0:c7:15:d5:a8:ed:52:b7:1b:6e:
         81:5a:f0:97:ec:3f:08:a8:85:f5:5b:50:5a:9a:27:83:50:5f:
         42:4f:dd:73:18:0e:a4:cc:1c:50:72:1a:3e:f4:aa:4f:09:e3:
         90:c4:f2:5a:4b:ff:eb:55:83:2a:70:45:0d:14:da:5e:63:36:
         12:b8:a8:9c:cc:9d:b4:b7:71:bb:7f:48:09:4f:91:c0:3d:12:
         ec:3d:c6:f9:6c:6b:3a:1e:fe:05:d0:fd:d5:d9:b9:b5:ae:2a:
         46:d2:1c:55:59:59:8e:dc:1d:d9:f7:2b:70:e7:21:35:f3:0b:
         31:60:34:d9:a5:6e:37:7a:78:33:17:cf:42:c6:ea:6d:13:30:
         eb:bd:f4:4f:65:ea:bd:47:0e:59:b5:79:95:cb:54:7c:56:2d:
         0a:cd:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 11:03:43 2024 by rpki-client on console-fra.rpki-client.org