Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9cd6432-4955-3718-bec7-aef7ba8a2d97.roa
File:                     a9cd6432-4955-3718-bec7-aef7ba8a2d97.roa (raw, json)
Hash identifier:          fosuamZ8ycQLfUZ4W/iCpU7yb2UePEd2Lu6UMuu/mpM=
Subject key identifier:   D6:79:F7:DA:1E:F7:FF:8F:E7:9D:2E:10:DC:5F:0A:82:C5:8D:19:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D16B55C1934513AEB1800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9cd6432-4955-3718-bec7-aef7ba8a2d97.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        71.202.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:16:b5:5c:19:34:51:3a:eb:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=fd662520-6455-4595-af60-6e3301997dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:11:a3:79:43:3a:2b:74:d9:cb:25:1d:08:
                    f0:86:2c:db:60:e1:1c:41:14:4a:50:4d:39:c0:f0:
                    eb:9e:3b:61:23:59:fc:6b:e6:1e:6a:e5:11:c7:84:
                    b3:e5:ef:61:4a:ad:8c:2c:25:0a:78:08:21:9f:5c:
                    2e:14:e8:3a:98:ed:35:58:72:bb:db:37:01:ea:6d:
                    8f:c4:c2:a3:7b:34:3f:68:82:53:1e:78:b9:b0:57:
                    d5:a9:f7:c0:47:73:b4:03:aa:80:e7:22:78:d8:79:
                    4e:d1:5e:fa:c3:f4:2d:33:98:ce:59:b5:46:de:fc:
                    0a:ae:8a:8e:75:65:2b:03:fa:cc:d3:af:2f:a4:64:
                    85:8c:c0:15:a3:d1:60:7d:91:8b:8f:99:b0:75:2f:
                    61:64:3f:98:20:59:59:e2:06:43:be:7f:c4:c8:a7:
                    a7:4c:4a:06:e9:e0:bb:e6:70:5a:ad:59:6c:f8:9f:
                    c8:86:70:cf:63:83:d0:fe:b8:99:dd:7c:f1:0e:d1:
                    09:7c:ce:88:80:df:67:41:4f:3a:67:8a:7b:89:72:
                    d9:0d:5a:13:a2:bd:70:31:7f:b2:fa:58:fc:93:46:
                    80:56:38:db:23:a1:27:74:52:c1:ac:44:5f:b3:da:
                    14:e8:08:09:43:60:c8:6e:cb:ed:57:47:9f:00:27:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:F7:DA:1E:F7:FF:8F:E7:9D:2E:10:DC:5F:0A:82:C5:8D:19:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9cd6432-4955-3718-bec7-aef7ba8a2d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.202.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:41:18:5e:8b:5d:0f:e2:80:8e:97:0c:33:05:f1:36:ae:40:
         31:05:6b:ea:69:c1:fb:61:31:7f:ee:89:06:b1:a1:16:1f:c1:
         4d:91:7c:66:b2:8e:f9:64:e4:31:7e:be:ca:67:9b:9b:e6:60:
         66:ca:6f:1d:08:cb:c6:d2:54:49:24:72:c3:cc:73:94:70:15:
         b7:65:d7:c3:bd:0c:74:7a:e7:c7:b4:8f:45:c6:9a:b0:3d:4d:
         b1:ad:55:52:9e:05:c0:50:ac:d4:3f:16:c6:b4:4d:83:1a:c1:
         25:93:98:55:d6:c7:40:a5:2b:49:bf:f0:c7:59:94:f7:47:30:
         2c:11:7d:c0:05:aa:11:0d:44:71:02:ba:a2:cf:69:6a:1c:48:
         23:3d:65:af:73:fe:c5:99:b7:a1:cb:24:98:f5:c5:8a:07:7a:
         71:1c:58:84:4f:ab:24:ee:29:97:14:a8:a5:ef:2e:d4:6c:99:
         59:2e:4a:ae:e9:bf:bb:02:90:e2:2d:87:95:19:cc:1d:7d:13:
         62:58:62:3f:e1:3a:f9:a6:83:9b:7e:56:ae:f1:e2:a2:34:db:
         ad:69:39:f5:83:a4:51:c3:be:bb:36:9a:38:1b:eb:08:8f:ff:
         5e:c9:83:ee:e8:8b:55:4d:ef:7c:c4:84:3f:96:a3:10:54:65:
         10:f9:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:32:00 2024 by rpki-client on console-fra.rpki-client.org