Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f6d2a2-932e-36c9-b820-8e1272febf12.roa
File:                     d4f6d2a2-932e-36c9-b820-8e1272febf12.roa (raw, json)
Hash identifier:          IQAxEnSloFlCGiPesD4p2s+L0btTGc22lxCbNMqt9m8=
Subject key identifier:   54:3B:31:57:3A:81:A2:47:F6:F1:35:E0:0F:23:1E:DC:A5:FA:89:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB5EBE740ED49FD9791F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f6d2a2-932e-36c9-b820-8e1272febf12.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        75.149.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:5e:be:74:0e:d4:9f:d9:79:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c2a9ae79-ec95-4cce-bdc8-7bf797d10b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:64:1f:b2:c9:55:a7:31:ce:c2:6a:f5:0b:
                    2c:f7:67:18:7b:a5:d8:46:32:3c:64:ea:d3:29:14:
                    a5:e7:08:bc:06:04:b5:80:8a:4c:10:fd:52:b9:ca:
                    38:4c:09:da:03:9a:04:f3:de:a1:e2:e5:cd:1e:b5:
                    80:ab:54:cc:99:8a:fb:7d:3e:5c:7f:7d:23:47:79:
                    89:4c:e9:63:ad:88:05:f5:32:cc:94:e0:3c:a1:ef:
                    21:c2:ae:a7:aa:36:a3:b2:57:c9:d6:d8:50:89:d1:
                    32:16:cd:1b:09:4d:96:ca:5e:72:0d:22:63:35:18:
                    90:01:74:62:50:1c:81:9d:40:10:dd:31:a7:5e:21:
                    d7:a9:9e:87:76:4d:dc:62:d1:16:40:fd:60:46:1d:
                    6f:46:25:a4:0c:5a:3d:00:88:07:a7:40:81:45:05:
                    54:ad:61:bf:af:ac:59:c2:ff:91:68:9c:84:85:d2:
                    39:b0:46:82:ec:ce:90:8c:59:25:24:e7:37:c1:53:
                    aa:18:24:94:d6:1b:92:f2:2b:f7:67:a5:1e:ce:6e:
                    64:0d:08:fb:be:7b:b7:d8:ed:6c:29:05:a9:b1:1e:
                    98:ec:0f:40:cb:69:5b:01:46:85:63:e6:39:63:bf:
                    c9:dc:1f:4b:0b:82:d9:a2:00:e0:a4:55:18:0d:49:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:31:57:3A:81:A2:47:F6:F1:35:E0:0F:23:1E:DC:A5:FA:89:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f6d2a2-932e-36c9-b820-8e1272febf12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.149.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:d0:e1:10:2a:92:cd:88:6c:cc:87:ed:69:6b:30:db:94:
         9d:ba:d3:4e:88:5e:88:5b:49:2a:f3:fe:9b:76:5f:ca:aa:37:
         fd:d0:a8:64:8d:55:ae:6a:b2:1f:4d:d4:6f:00:a9:7f:be:4f:
         84:29:a3:a9:ee:f5:17:56:56:75:de:62:32:c9:1f:de:0c:0b:
         d2:12:d1:05:25:af:da:53:58:3a:99:98:0b:b8:cd:23:aa:8b:
         f7:65:15:3e:76:51:f3:7c:1d:d9:32:ac:01:2e:dc:2a:9e:7f:
         3e:e4:0f:fa:08:3b:a2:02:9f:b0:7d:ac:66:41:4f:fe:75:70:
         dc:b8:d6:46:f3:67:7e:7c:71:79:7b:83:fe:fd:ce:af:44:86:
         4b:6e:2c:3e:17:e3:03:03:d9:f4:00:d7:c8:4c:02:15:0a:92:
         97:2e:5f:bd:91:51:4b:55:b9:b6:dd:38:bc:fc:01:b0:a7:97:
         fe:0e:f8:e8:d4:3f:a4:f5:9a:78:fd:c6:f6:da:05:0c:ed:a3:
         97:33:5c:07:d7:dd:79:76:f4:32:2c:bb:71:b2:18:4c:a1:4b:
         d8:10:76:22:77:96:8d:73:af:bd:b6:f2:2f:ab:7d:d4:50:00:
         b5:c2:db:55:cc:91:50:c6:ca:80:d9:ba:57:a3:5b:5c:7f:4a:
         94:59:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org