Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1260ff9-2c78-3199-9046-08d8c08efbda.roa
File:                     d1260ff9-2c78-3199-9046-08d8c08efbda.roa (raw, json)
Hash identifier:          OBI3Osh7ebitwjRG88Qcqo+5jqW/iuTQ8x8/t5/RY6g=
Subject key identifier:   9B:C2:DC:E1:86:AA:C2:F6:6D:27:12:62:CF:C7:C3:EF:40:A8:6C:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5E6F0BFC8ADB146DDF180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1260ff9-2c78-3199-9046-08d8c08efbda.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        67.160.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:e6:f0:bf:c8:ad:b1:46:dd:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=c19533c3-7d39-4a4a-86ad-ca1babe8ccb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:49:d1:60:2d:15:a4:2a:b3:7c:0e:2a:a2:
                    77:9f:c6:8d:89:ae:7c:6c:03:7c:b1:57:4a:d2:2a:
                    28:b6:04:5d:87:c0:e0:d1:c9:cb:cd:a1:79:37:f0:
                    f3:2f:24:7d:1c:d8:88:10:68:23:b2:0b:02:1f:20:
                    3e:1e:42:3c:39:a9:a7:7e:65:5f:a5:a3:16:5c:48:
                    ad:6e:f8:bd:f1:02:35:b4:1d:7a:7d:fe:e5:98:a5:
                    40:64:98:6e:4f:55:b9:3c:12:9d:ed:d5:b1:af:d4:
                    c4:6b:6e:eb:51:46:ac:1b:b1:78:02:69:9c:c9:0e:
                    e9:60:14:b0:17:20:de:62:4b:66:05:f7:ae:0e:9c:
                    bf:70:0c:18:c8:b6:fa:db:be:7e:45:5d:08:ac:97:
                    a7:2b:2a:e8:97:31:e9:30:e8:b2:ae:04:ad:8c:fd:
                    62:b8:73:6b:03:1d:fa:7e:a1:b5:a4:18:72:de:d1:
                    7f:86:38:79:c9:3c:b9:1f:6c:37:d9:de:a5:2a:36:
                    1f:04:a6:e9:28:88:ba:a1:e2:20:63:c4:ae:7a:ea:
                    4d:bd:9e:b2:35:9e:0e:f6:2b:b2:53:4b:58:75:d6:
                    38:03:a5:15:cd:b2:6f:f0:25:be:46:c7:d8:57:cc:
                    a8:bb:c3:d1:2a:e5:ec:6a:7e:4f:46:3f:81:01:0a:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:DC:E1:86:AA:C2:F6:6D:27:12:62:CF:C7:C3:EF:40:A8:6C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1260ff9-2c78-3199-9046-08d8c08efbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.160.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:a7:35:f9:67:e2:2a:21:38:b0:f4:ae:a5:98:7e:37:e4:
         64:3d:14:27:c3:f2:cd:df:78:e6:e7:76:84:d6:84:8e:21:d7:
         db:cf:96:d4:36:02:7d:cc:e6:da:a3:f3:22:c8:b0:1a:fe:ae:
         77:d6:09:47:18:c7:ef:9f:f7:b0:9c:ed:4d:46:d5:91:0e:2a:
         45:07:97:e5:a4:15:63:44:51:48:30:d0:bb:2a:b9:4a:93:85:
         72:23:61:4f:13:36:a7:97:03:e9:13:e6:83:4d:b9:2f:9b:2d:
         96:98:77:60:7f:1d:91:4f:10:a9:0f:c6:0a:28:97:02:a5:fc:
         e5:67:78:7e:9a:02:fe:38:e8:48:73:3a:93:a0:a3:a8:95:d6:
         9f:e1:46:e2:cf:00:87:f9:c6:d5:c1:6b:a3:8b:b5:61:79:5b:
         79:77:21:72:ba:7c:18:85:47:86:b9:51:50:9b:95:fd:b7:86:
         19:e6:80:24:e1:71:2b:06:09:c8:80:d1:63:27:65:d8:63:71:
         1c:fe:95:59:33:c8:ff:c8:eb:ab:4c:21:b1:e3:23:24:6b:cc:
         12:71:40:b6:ce:3a:4f:39:14:85:08:41:20:89:ff:85:96:93:
         d0:1f:9a:1e:e1:45:25:57:cf:02:65:79:cf:86:fa:86:64:23:
         04:59:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:32 2024 by rpki-client on console-ams.rpki-client.org