Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b285e7c8-68dc-3f6b-92d3-f758749ac4a8.roa
File:                     b285e7c8-68dc-3f6b-92d3-f758749ac4a8.roa (raw, json)
Hash identifier:          eK1w+aRUmjLzaAsQX+qduNDkqhh8+GwUwiqEfskIvsA=
Subject key identifier:   8D:85:E6:6D:A6:85:C2:23:27:1C:ED:9E:51:5E:C4:94:F2:56:04:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EA4D653B891088DF68870
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b285e7c8-68dc-3f6b-92d3-f758749ac4a8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        174.167.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:a4:d6:53:b8:91:08:8d:f6:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=76964c59-7a4a-4b4b-82b3-73f4139256ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:ab:a0:1a:33:ea:56:e2:a4:0e:a9:94:1e:
                    d3:45:d3:36:06:2a:5d:1a:12:9f:bc:57:98:fe:9d:
                    af:a0:cb:35:fa:77:4f:ba:3f:09:d1:be:ca:5b:2e:
                    b4:9f:cb:dd:b2:46:05:cb:1c:f0:71:0d:c6:e2:26:
                    46:1e:3d:05:7c:8e:ff:b8:cb:c3:14:5e:a9:4e:92:
                    3f:5f:1d:9a:7f:b2:11:64:15:af:a3:6c:eb:3a:49:
                    31:c1:97:f6:96:a9:b8:b8:c5:d2:9c:80:be:ab:aa:
                    b5:50:c3:14:cd:74:7b:80:83:ba:3a:52:86:a4:3c:
                    1d:1a:c6:4e:34:03:a2:95:33:0f:c4:ba:79:39:d2:
                    b6:4f:49:85:53:00:9d:62:97:21:57:d6:55:ac:02:
                    9c:86:bb:6a:f3:29:3c:6e:bc:2a:71:b4:58:de:58:
                    77:1e:8b:10:db:e8:b4:a1:75:98:ad:d3:d3:e9:57:
                    24:43:f6:09:4a:a9:ab:cc:e0:fc:59:28:4d:bc:ea:
                    5f:fc:0e:59:fb:b8:b7:fb:a0:57:42:2d:2b:3f:73:
                    f9:b9:54:ca:c1:1d:01:a4:b5:27:44:4d:1b:35:09:
                    5f:fa:0e:a2:97:2a:e8:b3:9b:0b:40:bc:10:9f:51:
                    99:6c:67:cb:09:e7:37:c0:16:f8:19:59:f1:96:1c:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:85:E6:6D:A6:85:C2:23:27:1C:ED:9E:51:5E:C4:94:F2:56:04:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b285e7c8-68dc-3f6b-92d3-f758749ac4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.167.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:74:ad:64:28:19:a7:27:03:b5:6c:ab:f7:78:e6:8a:4f:41:
         d7:81:55:49:3b:82:be:9e:3a:f8:77:ff:37:92:a3:fd:b8:6c:
         a2:cc:64:7f:b8:81:62:87:25:78:f2:15:42:79:0f:c6:22:ba:
         33:db:70:2e:ac:eb:25:20:62:18:dc:db:0c:23:76:59:dd:7b:
         49:8e:f1:0a:a3:1d:45:44:10:03:1a:2c:48:53:35:44:9e:02:
         b2:39:1b:f6:bc:bc:2f:11:be:47:7f:f5:b3:4f:3d:15:83:7b:
         13:3a:d2:ca:86:9c:f1:83:67:2c:a8:d1:fe:01:1b:22:d2:d5:
         af:61:bb:a0:e5:cc:49:c4:6d:f8:4f:2e:01:34:3a:22:08:e5:
         ea:ae:6b:6c:2e:bf:67:7e:bc:51:77:04:35:d5:f5:a2:b3:91:
         83:a3:bc:f2:13:a0:15:8e:4d:5c:db:a9:20:61:9e:7e:5d:18:
         d1:09:0d:94:82:9c:82:dc:08:c0:04:05:ac:27:11:d0:31:f8:
         2d:3e:e9:b4:81:a5:7d:1c:91:b6:79:1b:6e:c4:e9:f2:d0:8a:
         0b:ff:ac:d3:cf:e2:99:70:39:f7:75:63:70:8b:4a:d4:06:33:
         23:c7:50:f2:24:80:1a:eb:57:04:7e:a0:02:ec:d4:f1:ff:75:
         79:ee:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:47:29 2024 by rpki-client on console-fra.rpki-client.org