Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa
File:                     c2f9af23-ca76-3f8c-b1ef-518044665cee.roa (raw, json)
Hash identifier:          YDyj7AMQs6c38efQPd/DbhBOio/ONh+VYM94o0AJ4TE=
Subject key identifier:   64:B3:0D:49:8A:32:09:39:8A:84:E7:59:1E:83:A1:34:58:52:7F:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EC26472AD614B4D5D0540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        71.230.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:c2:64:72:ad:61:4b:4d:5d:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=512e3d87-3a65-4824-847c-009c78ee4e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:ef:78:58:6e:04:3b:48:1a:12:11:5a:60:
                    30:fd:9d:26:12:2b:e3:f2:a8:c2:52:5f:9b:cc:49:
                    ee:40:83:3d:87:4d:b1:2a:4a:ac:13:c7:dd:30:65:
                    09:19:18:bd:95:a5:dd:70:02:00:55:b7:6a:3b:ea:
                    2a:36:56:a5:82:eb:1a:9f:da:a6:66:d1:71:0d:ac:
                    5c:98:0b:04:6c:d0:c1:40:03:a9:6c:61:30:74:27:
                    0c:88:fc:95:9d:e9:bf:7b:54:4d:05:dd:a8:0c:fd:
                    04:a8:2e:77:0d:fc:fb:16:39:ad:63:af:20:1a:c5:
                    91:af:bd:72:05:f9:67:75:1a:39:db:61:45:61:c4:
                    77:65:d1:1a:27:f0:d6:25:fd:b7:1b:0c:df:82:84:
                    6a:3b:ef:b8:35:14:d9:af:f3:53:31:09:30:70:16:
                    f4:4a:b8:ee:33:71:a1:90:b1:91:8a:72:b4:cf:24:
                    73:ba:95:67:fd:26:20:91:4f:0e:69:db:b8:1e:dd:
                    19:3d:b8:0a:84:d7:b4:55:63:22:84:81:92:09:5a:
                    19:4b:db:1c:d6:ee:8c:1e:43:e4:95:39:e5:82:ab:
                    e6:41:b1:f9:a5:b4:16:13:5c:70:5d:61:a5:82:6a:
                    b5:0d:dc:53:58:ec:bf:4e:6f:a4:a7:6f:eb:2c:7d:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B3:0D:49:8A:32:09:39:8A:84:E7:59:1E:83:A1:34:58:52:7F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:a0:23:e6:1d:ea:f7:31:ef:45:2f:85:55:95:8f:30:ad:
         f9:58:a2:aa:79:ec:bb:12:f3:3c:b8:4f:3d:77:8b:e2:4d:34:
         13:99:3d:5d:77:db:0d:20:bc:0d:ca:ba:1b:cb:f0:7c:1c:88:
         0d:4b:11:24:49:5d:60:45:e9:a8:ba:5a:da:ac:55:0e:81:43:
         6e:aa:ae:f3:f1:43:28:06:fa:f1:5f:06:39:8b:df:17:dd:28:
         b6:eb:f7:a5:b8:97:74:c4:7b:7b:db:0d:78:d7:0c:9a:d2:db:
         8d:4b:8c:82:a4:f8:c6:f1:b1:29:bb:58:42:05:ed:8c:1a:cf:
         ba:5a:37:79:36:05:21:c0:6b:cb:c0:31:e8:95:61:47:2e:fa:
         70:e5:1e:60:47:f2:54:30:e3:31:f7:46:46:cf:b6:22:4e:21:
         96:7e:2b:73:82:f2:80:af:ef:9d:c2:fd:e0:f8:ac:8d:f5:6b:
         ad:cb:68:a5:66:72:0a:19:ac:74:ac:a0:19:b5:fa:35:73:60:
         9a:8d:fd:58:54:33:4b:9b:2c:80:cf:26:dc:a0:ff:0f:cd:73:
         e5:39:a3:fa:2c:65:5f:53:74:22:ec:59:4b:fb:3a:21:f0:58:
         15:f9:e1:ba:e7:aa:9f:f3:12:64:39:b4:7e:56:17:b7:1c:78:
         c1:8e:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:18 2024 by rpki-client on console-ams.rpki-client.org