Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afbb1b66-f9c3-33f2-a09c-d6025a7165b4.roa
File:                     afbb1b66-f9c3-33f2-a09c-d6025a7165b4.roa (raw, json)
Hash identifier:          K4zBvu54obKyYS5tsu0o42hyAYYaog0smjnC6MS7B7g=
Subject key identifier:   6D:F7:22:B3:8B:A5:4B:5F:AA:F5:D0:4D:87:9E:96:CA:C0:26:C6:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D117354D0C472A9AFD480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afbb1b66-f9c3-33f2-a09c-d6025a7165b4.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        69.181.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:11:73:54:d0:c4:72:a9:af:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=11aa9a69-8e5d-49db-bbfa-5f7894ec6a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:9f:49:46:65:2b:1d:16:39:e6:aa:bd:9d:
                    bc:66:2a:39:6a:0f:75:e2:4d:8f:f6:35:3d:57:74:
                    15:f5:c7:d5:7a:8e:6a:34:81:e3:a9:ce:79:09:32:
                    df:15:c8:62:ae:ca:7e:3e:15:71:09:08:83:60:92:
                    fc:03:71:c9:ef:e5:6c:2c:6f:29:b5:2e:3f:14:35:
                    03:58:f0:02:40:29:be:db:c2:dd:e8:94:92:96:b3:
                    83:3d:7a:6e:4d:67:f8:64:ea:52:c3:1e:45:11:ae:
                    c8:ac:f7:ac:a5:bf:87:82:91:af:11:d0:b2:4c:06:
                    09:6c:e0:88:df:b9:dc:ed:cd:cd:aa:9d:27:da:4b:
                    3d:73:53:11:e4:89:2d:96:bd:72:5a:d3:a6:4b:c3:
                    5c:1d:2d:f2:21:92:19:f9:89:a8:0c:33:0b:c5:d7:
                    ed:f1:e5:85:ba:28:95:a4:f1:df:17:42:bc:ef:e2:
                    c9:50:48:dc:44:63:e0:44:59:7c:d9:6a:a1:2e:65:
                    9e:ff:31:06:dc:68:9c:8b:93:9e:90:ec:2c:66:a8:
                    f8:cc:ef:89:52:ef:d8:94:86:25:b9:de:70:e1:b3:
                    92:ad:a7:83:bb:37:da:6c:58:73:21:03:b0:8a:44:
                    0c:0f:e1:f0:ed:85:ed:06:fb:88:33:f8:8e:c8:82:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:22:B3:8B:A5:4B:5F:AA:F5:D0:4D:87:9E:96:CA:C0:26:C6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afbb1b66-f9c3-33f2-a09c-d6025a7165b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.181.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:45:66:48:2f:b4:c9:24:8d:28:51:b0:8d:08:01:4f:c3:32:
         e1:3a:ba:55:c9:b9:ed:cc:dd:90:e3:85:66:2d:d1:72:a1:7a:
         32:06:5e:09:e8:30:be:e8:33:7c:98:29:3a:a7:bb:fe:e9:97:
         c9:ac:28:2f:ed:b0:92:d9:58:f6:95:10:fd:e5:5e:85:02:3c:
         63:6b:e9:e0:a8:da:66:60:b7:3f:56:0a:55:29:24:4e:71:6b:
         4d:8c:5c:bd:7f:e1:9f:9d:46:fd:42:ce:6d:a5:03:5d:d5:3b:
         93:ff:21:e4:1b:7c:0d:54:52:97:d9:d7:35:c3:fe:19:e5:72:
         45:0e:d2:9e:24:ba:0c:f8:fc:2a:ea:10:e6:ff:00:10:35:4f:
         b4:34:e7:4e:ee:a3:b2:a4:29:5a:6d:42:69:37:da:b8:cc:8e:
         f5:ce:94:97:d2:7c:23:00:58:d0:fa:50:08:b9:5c:e1:23:33:
         fe:28:9c:a9:7f:fe:fd:78:3c:81:e2:cc:18:24:f5:ba:da:f3:
         2e:e0:45:bb:bb:d8:51:1d:30:66:22:ff:ff:ae:8c:93:6d:2e:
         23:33:b8:a4:bc:c6:a2:09:62:1a:6e:13:4d:dd:b5:3f:a5:d3:
         da:ea:db:50:5a:48:f7:a9:79:19:67:15:f6:95:4a:b1:05:a6:
         c3:ef:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:32:31 2024 by rpki-client on console-fra.rpki-client.org