Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa
File:                     dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa (raw, json)
Hash identifier:          11pX5154pMH7tntmUUBv99Ft3QFdWtBqLETItR/v+Pg=
Subject key identifier:   FF:6D:83:13:02:33:FB:AD:CC:EA:A7:49:FC:97:71:8F:EE:A5:67:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF85922D716C0E14D364000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        107.3.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:59:22:d7:16:c0:e1:4d:36:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c19ccc30-45c4-4f16-a17b-a7b0257ca73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:7f:96:34:43:58:fb:60:5e:c4:21:60:83:
                    16:92:06:03:aa:c5:0a:61:e0:65:4e:88:92:71:76:
                    79:2f:77:be:f4:46:49:2b:ef:83:e4:b4:7d:d1:f6:
                    52:b4:d6:c5:a6:79:27:08:e7:16:71:b1:93:ba:d5:
                    58:97:07:6a:d5:a6:dd:1c:a0:b8:9f:64:44:54:ab:
                    f2:7d:00:66:54:37:0c:ff:80:51:cb:74:28:88:0b:
                    71:f9:ea:e4:aa:a3:b0:81:9a:76:69:24:c8:2d:e4:
                    74:96:e2:a1:14:d2:11:6d:34:ce:61:82:19:ef:b3:
                    d2:b3:71:f1:e0:63:f9:b8:a0:3c:fd:6f:90:34:9c:
                    22:f3:4c:9d:88:bb:5f:79:61:94:71:fe:79:2c:4d:
                    1d:cd:c9:25:f8:7f:6e:21:3d:6b:c8:1c:77:23:d6:
                    44:66:d5:ab:7a:9a:bd:55:12:fb:47:d9:13:28:25:
                    9e:ec:ba:37:60:ad:93:ca:e4:15:a7:4c:fc:ab:ac:
                    50:db:6a:ae:ec:4b:2e:db:5e:27:a7:a1:d8:66:4b:
                    ab:f3:c5:17:8b:0b:ad:df:ae:58:41:8b:f4:7d:33:
                    cc:51:8f:b4:5f:2e:f2:b6:ac:87:33:cb:10:93:bc:
                    62:2f:c0:57:e6:15:42:f9:2a:19:57:37:66:ce:e5:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:83:13:02:33:FB:AD:CC:EA:A7:49:FC:97:71:8F:EE:A5:67:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:da:be:6f:85:46:1b:c6:fa:84:be:77:ac:d8:96:16:aa:
         99:58:b0:c0:8b:e5:1d:48:76:76:c6:29:a0:79:ed:9a:a2:2c:
         bf:9e:3e:6d:c5:67:d5:0c:2c:d5:cc:cd:f1:1f:95:4f:5a:ea:
         7b:c4:35:0d:31:84:37:0d:21:7a:fe:21:dd:0a:0a:0b:3b:b0:
         e1:23:c2:c9:da:19:bb:45:9e:60:d4:25:91:57:35:67:11:8e:
         d4:a8:34:da:3f:41:df:a9:a0:4c:9a:1f:2a:91:fe:4b:59:20:
         b2:02:b8:c7:c2:83:58:bc:43:18:43:3a:2d:c1:e3:d0:93:2f:
         99:00:70:d6:11:26:c3:cb:c4:aa:1a:e7:3c:2c:4b:ed:24:9e:
         cb:c7:27:87:50:9c:f7:7b:21:06:df:96:1d:36:41:dc:27:9d:
         f6:12:65:cc:88:0d:f6:66:9d:bf:29:fd:c3:5d:84:9e:e2:e4:
         ac:92:17:08:12:76:52:91:41:fd:db:c8:dc:4d:62:33:3c:aa:
         72:d3:83:7e:76:da:93:f6:66:06:04:ed:69:43:92:2e:e9:73:
         fc:11:50:9f:7e:e9:30:ec:f1:c7:2d:19:88:c3:58:97:e9:8b:
         a7:02:d8:36:49:0f:db:85:97:0f:15:77:e3:48:28:19:ca:96:
         4b:2e:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:35:33 2024 by rpki-client on console-fra.rpki-client.org