Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa
File:                     9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa (raw, json)
Hash identifier:          CNtfzWlUTZn8BjgkhpXhSOIVPLZyizfC6xOJeum1OwQ=
Subject key identifier:   1B:5B:70:2B:FA:4F:5F:FD:1F:DF:90:6F:D3:D5:6F:F0:C7:53:95:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BC5C01AEF219F3779FE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        67.186.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:c5:c0:1a:ef:21:9f:37:79:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=bab5afa0-5d15-4c3e-bc97-37c7bc5fc7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:0a:3a:f2:5f:ec:ff:ed:8b:a1:e8:db:82:
                    ea:d8:ac:7d:65:bc:18:0c:4c:02:b9:2b:80:39:f7:
                    7e:ff:00:62:06:08:5d:52:ae:7c:81:f6:ea:62:39:
                    33:30:24:a5:62:a4:02:d4:e3:5d:17:d5:c4:1d:b5:
                    17:18:cf:c0:ea:24:86:0f:84:56:60:4a:3a:e4:8a:
                    be:05:e7:89:cb:6b:90:e9:ea:d0:9e:5f:1e:1d:14:
                    6f:12:b8:1e:91:1d:07:06:d3:ba:1a:9f:0d:59:b9:
                    33:e9:1e:d7:36:af:08:d1:23:bc:1e:8d:e1:b5:03:
                    02:86:b9:86:b4:0e:3f:ec:02:05:53:24:ee:e7:bc:
                    ce:e5:27:b3:04:b4:67:ab:d6:9c:28:92:0d:31:91:
                    8f:14:f2:2b:23:02:15:4a:a2:af:ec:40:82:70:d0:
                    c9:37:d1:c8:e6:88:0b:f6:39:38:ee:37:00:ec:07:
                    83:53:8c:24:01:be:73:e9:76:90:5b:3e:33:82:39:
                    ce:da:36:77:f9:9e:12:5c:82:b1:cb:eb:78:40:bc:
                    31:1c:66:12:b0:88:ab:a1:3e:75:1e:15:d6:c5:99:
                    d6:ef:99:70:06:2a:33:19:9d:2d:61:82:4a:d7:e2:
                    07:6d:8f:08:f3:c0:4c:de:51:13:c2:f9:be:e1:2a:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:70:2B:FA:4F:5F:FD:1F:DF:90:6F:D3:D5:6F:F0:C7:53:95:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.186.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:41:80:26:6d:50:23:1b:8e:88:e6:e8:0e:d7:52:6e:3a:
         ca:c4:4b:4b:39:90:62:a7:1f:e5:81:a3:67:5d:6b:6f:ee:8a:
         66:39:9b:df:36:8b:44:07:3d:fd:7e:04:14:f6:ce:2f:cc:67:
         7c:91:72:d4:a7:61:50:04:9e:e7:ff:17:bd:52:f5:c7:0d:70:
         1c:3c:00:f9:79:ef:6c:52:f3:0f:9c:2a:32:eb:06:26:6a:5b:
         99:d3:8e:ce:3c:81:cd:4c:89:a0:83:89:f8:a8:49:e5:78:36:
         fd:33:a7:18:eb:92:7b:64:4b:32:26:bf:b3:1c:7b:5f:bf:e1:
         57:4b:cc:9c:f9:d8:27:69:f7:ab:92:19:73:8b:c2:38:50:9e:
         91:03:56:c3:6c:40:55:8d:eb:9e:2d:b9:0a:ab:4e:78:f8:be:
         b7:e8:6c:79:bc:6d:e0:54:e1:d8:2a:a3:27:72:9f:09:d7:7e:
         d8:4e:98:a8:38:b9:f8:f9:c5:e2:4e:60:60:8b:e1:38:72:7b:
         9a:bf:9a:f5:96:c7:73:e1:13:8a:9a:ba:ca:dc:02:cf:de:0d:
         9f:e8:f9:5b:2f:5e:de:cc:0f:26:8c:28:0f:2a:04:2a:7e:a9:
         f5:3c:d0:55:e0:e0:07:89:8e:e7:a3:26:f1:bc:1d:f6:45:a5:
         2b:b7:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:23:39 2024 by rpki-client on console-fra.rpki-client.org