Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa
File:                     9f9d019a-700d-31af-b8ce-d7512ca461f3.roa (raw, json)
Hash identifier:          IWt0duyO3MEJr7OQLxP7y89+64xBu/BEk9dzmnxCsaU=
Subject key identifier:   7A:E0:DB:B7:11:12:3C:46:0D:FF:F2:D2:00:5B:19:87:05:5B:E1:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D183F7ADA1517221B2700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        71.202.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:18:3f:7a:da:15:17:22:1b:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=21872e23-bafa-4526-8216-07637d91e1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:91:0d:1a:b7:d0:28:7d:5c:b8:ba:3e:86:
                    47:c2:c7:ae:ae:84:e1:23:a8:d9:c3:78:d3:5a:9f:
                    f5:a8:d0:9c:05:33:1b:d1:ea:c6:02:b1:37:f1:be:
                    23:6d:35:80:c4:a7:87:f9:05:79:a6:66:e0:a7:17:
                    41:4b:47:b6:82:36:ab:28:26:8d:6c:0d:7c:c0:f2:
                    0b:9c:30:9d:26:2f:da:36:64:a4:88:ca:7c:de:1d:
                    06:17:1d:c9:3f:c5:99:25:b7:ef:18:64:52:c3:67:
                    4d:fc:74:13:fe:a1:88:e9:44:03:8a:d4:35:7c:a5:
                    3f:05:0d:86:b7:d9:a6:67:df:3c:b7:83:d9:25:f8:
                    18:52:86:f3:5f:d5:e6:5c:a0:a8:9a:7e:fb:7b:9f:
                    30:cf:30:dc:21:af:56:d6:90:8c:c7:59:55:ad:f8:
                    36:cf:df:49:81:76:db:70:dc:b5:e9:cf:c3:38:9d:
                    5c:65:cb:03:2a:49:b7:33:12:3b:d7:d8:48:c5:ee:
                    c1:d2:57:29:5d:4c:ff:30:30:52:eb:72:c9:a1:3e:
                    8b:0e:de:32:59:16:68:79:8b:41:6a:d7:c7:91:70:
                    46:38:58:f4:e6:37:22:1b:09:ba:3f:8b:ea:fb:1f:
                    14:05:f6:23:b1:35:15:69:5d:69:9b:57:42:73:a0:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:DB:B7:11:12:3C:46:0D:FF:F2:D2:00:5B:19:87:05:5B:E1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.202.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:17:97:28:f4:e7:26:ed:f6:ef:a0:c3:66:d9:2e:76:b4:78:
         7b:86:71:0f:93:20:b3:b9:04:e3:99:4d:62:b1:9c:61:4a:f2:
         c6:34:46:af:7d:5a:e9:3e:ba:fa:bb:37:16:95:ac:b7:dd:3f:
         ac:1e:34:fe:8d:50:b7:2d:f8:f0:09:7d:b5:03:d1:29:61:ed:
         ac:44:ba:ae:47:35:ad:90:2b:65:26:7e:9d:4e:f9:fa:a6:80:
         7e:b5:17:b8:bb:36:b2:6a:07:46:6e:f2:e7:9f:3a:ef:71:35:
         ac:5f:8c:8b:b6:e3:c7:1b:ec:6c:d4:11:03:f9:41:9b:d2:7d:
         5e:bc:1a:8d:8d:a1:c6:84:e2:ca:1d:07:23:03:93:14:44:72:
         08:eb:ee:07:04:74:02:74:b5:ac:45:b6:dd:3f:13:f5:e2:73:
         68:46:52:c9:c9:9d:6a:da:02:9a:d5:69:10:9b:39:ac:a2:d0:
         5a:1b:4a:33:73:ae:05:ef:af:0c:1e:92:06:41:7a:60:e6:a0:
         6e:37:1e:aa:a8:e4:f4:29:6d:4a:16:4d:69:c9:fc:bb:51:c8:
         31:65:88:bb:b1:47:7c:43:0c:c6:87:bc:1a:99:3f:68:60:75:
         4d:3f:88:da:51:12:93:de:c6:89:eb:cd:7b:2c:76:d1:10:4f:
         68:5c:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:31:08 2024 by rpki-client on console-fra.rpki-client.org