Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13d370b-8c69-3f4d-b275-0e4b8bf2f2d3.roa
File:                     a13d370b-8c69-3f4d-b275-0e4b8bf2f2d3.roa (raw, json)
Hash identifier:          XoFkMHV6BFcABHoesHQmuf75WqXnzOK0Eo4PrVsZflM=
Subject key identifier:   0A:45:3E:29:B0:38:4A:79:42:3E:3B:99:4A:66:40:30:14:9A:2C:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7F2D5F1313E1715299780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13d370b-8c69-3f4d-b275-0e4b8bf2f2d3.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        70.91.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:f2:d5:f1:31:3e:17:15:29:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=09118929-c580-40be-903c-554d0e529c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:5f:bd:0f:1b:ba:39:21:4e:03:f8:e2:a3:
                    6b:e2:92:5c:4a:62:0c:90:62:55:29:54:ce:4d:4b:
                    d6:71:ab:e2:27:a3:51:9f:d7:ce:c5:3d:3a:51:7e:
                    1b:d3:64:26:db:ab:0c:8d:71:62:48:27:5a:39:e1:
                    ed:16:b3:04:77:1a:fc:76:ee:e5:1b:df:33:d3:01:
                    69:69:98:3e:05:d8:02:47:2f:21:08:e5:d8:23:49:
                    d3:28:24:e0:2c:c9:68:ac:75:3e:4c:89:f6:bd:87:
                    33:07:da:42:ac:0d:e7:54:21:84:ee:4a:9f:9c:02:
                    8b:c1:55:c7:1c:6e:f2:87:d2:74:00:66:e8:86:fc:
                    6b:c7:ac:55:c4:37:1e:e1:40:6d:31:48:4a:50:e3:
                    7d:1a:04:a5:b0:51:8c:61:8f:48:83:c1:da:53:6c:
                    76:b2:3c:31:a7:b0:ee:6c:8d:78:ce:46:65:38:2d:
                    1b:12:4e:ed:fb:f9:b1:46:9e:ef:84:89:f5:9d:cc:
                    07:d7:98:84:af:53:6c:29:65:8a:c3:d2:f3:4d:7e:
                    82:ba:79:2e:a5:a9:0f:80:12:f0:31:b8:5c:0b:c1:
                    82:c3:62:0d:37:4c:35:cf:b0:90:c9:e9:e2:88:84:
                    b0:84:bf:84:81:e6:b0:78:c8:13:2b:23:3d:fd:dc:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:45:3E:29:B0:38:4A:79:42:3E:3B:99:4A:66:40:30:14:9A:2C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13d370b-8c69-3f4d-b275-0e4b8bf2f2d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.91.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:b5:ec:88:74:33:ff:e3:ff:83:4a:56:7b:f0:15:9d:c7:
         86:69:70:47:8d:b2:1c:3e:f4:e7:4a:51:7a:fc:03:c2:57:49:
         f9:fb:2b:3a:e5:64:7c:b2:08:cf:a8:d8:3c:7f:a5:e3:c3:c4:
         56:80:24:89:21:de:a7:f0:5c:f5:99:6d:b1:b9:d1:50:57:e5:
         2b:1d:51:9a:a5:93:13:c3:b1:0e:f0:03:4c:1b:62:f4:a4:75:
         d2:f8:81:69:2f:c0:12:ce:5b:48:95:a5:0f:59:db:2c:b8:61:
         65:ca:ae:1a:13:1d:1e:5a:02:f3:ed:32:fc:e4:d1:bd:df:5f:
         1c:5c:f5:6c:56:34:35:1a:da:6e:01:2f:e8:55:15:a9:5a:82:
         4a:f7:f7:92:f5:01:3c:08:2e:a1:62:9e:b6:dc:bc:bf:c8:7c:
         a7:db:4c:3a:3d:ef:d6:e9:95:52:8a:08:2b:df:f1:2f:f6:f1:
         61:44:20:56:b2:dc:4e:ee:ff:5a:82:55:ec:85:02:80:c4:87:
         88:72:3e:ca:09:6d:77:30:87:c9:26:25:88:66:50:42:59:c6:
         8e:2c:7a:4d:da:71:25:88:2b:5a:b4:12:40:e6:01:11:24:0e:
         39:11:e3:8c:ff:2e:e4:77:cf:44:69:4b:b6:62:32:50:bf:78:
         a1:6e:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:11:39 2024 by rpki-client on console-ams.rpki-client.org