Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0883833-2670-3b5c-b3a5-562069f9bf23.roa
File:                     f0883833-2670-3b5c-b3a5-562069f9bf23.roa (raw, json)
Hash identifier:          0hhZqhtIFbZ17yaWDezuga5/EPGx3hMkEqhMmyh9lYs=
Subject key identifier:   39:A1:C9:98:3B:2C:58:C1:2A:39:4D:CA:07:23:06:C4:EE:1A:2B:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8F076752081FAEA824E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0883833-2670-3b5c-b3a5-562069f9bf23.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        70.91.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:f0:76:75:20:81:fa:ea:82:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=54eb767f-cab6-483b-93fc-1420ab3227b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:41:ab:30:8c:9b:7e:4a:d9:31:0b:48:6b:
                    a1:85:17:c8:41:8e:cb:67:01:52:b0:d5:3d:25:e3:
                    7e:ea:a3:7b:29:86:22:b5:33:f8:09:5f:d3:35:c9:
                    dc:f9:32:33:72:99:b7:25:77:89:79:d5:49:1d:21:
                    ff:0b:4f:3c:48:6d:f4:f5:8f:88:d1:8d:64:b9:f1:
                    60:60:c0:f7:43:d8:92:26:f0:a5:ae:9b:b9:fe:b3:
                    b1:7e:f8:a4:e0:9d:01:84:1d:f6:8d:d3:19:b0:63:
                    1f:3b:c4:0b:e9:55:56:5b:36:31:20:b6:d7:c9:2a:
                    fb:8f:1f:f0:51:6c:69:df:b7:8a:6d:90:9d:cf:99:
                    18:81:68:a3:29:66:53:b4:9e:4f:ab:2a:15:db:36:
                    55:dc:91:a2:c5:1d:79:14:cf:c2:33:cb:8f:1a:3e:
                    41:eb:bf:5f:e0:24:34:d4:30:3d:3f:b1:97:00:94:
                    3a:1f:63:57:a3:88:78:bb:b9:98:38:1d:89:30:fd:
                    0a:d3:bd:cb:1b:9d:6c:d0:e9:bb:d7:04:59:f3:73:
                    b8:50:99:fb:d3:bc:55:f7:dd:52:1d:b7:7a:c5:a2:
                    35:6a:bf:07:01:e4:33:2e:28:cf:f8:c2:36:3f:65:
                    a2:fb:5f:f0:00:a9:ac:5d:12:68:a1:d8:eb:4d:7d:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:C9:98:3B:2C:58:C1:2A:39:4D:CA:07:23:06:C4:EE:1A:2B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0883833-2670-3b5c-b3a5-562069f9bf23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.91.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:49:96:40:3f:c4:48:32:45:88:43:e3:da:9d:98:2b:2a:
         6c:e3:c0:86:ab:39:dc:bb:f1:6b:4a:94:4d:bf:04:39:9e:19:
         17:15:f9:74:23:90:78:b7:79:ee:0c:67:45:e4:f0:2c:82:f4:
         28:9e:18:08:22:6c:bf:76:10:26:0e:e4:3c:71:38:45:5e:0c:
         28:8f:3b:27:45:8d:24:3d:d5:47:de:b1:6e:e8:a2:f7:14:a8:
         dd:ec:7c:df:1f:38:af:68:4e:d4:87:d4:93:41:ca:19:5c:8e:
         83:02:fe:6d:58:38:00:5f:b0:6f:e9:e2:b4:3e:ff:cf:af:4e:
         e8:cb:df:f5:d8:e6:e5:ba:d0:0e:c5:bb:15:b3:4a:f1:ad:47:
         11:80:0b:64:17:c0:17:c0:8d:24:3f:3c:bd:17:29:91:13:00:
         9b:4d:d4:81:01:61:2b:c3:96:cf:54:d2:ff:18:48:4d:84:08:
         78:10:0b:4d:a8:80:37:c0:0c:59:4e:1c:c3:de:48:67:12:04:
         2f:6a:02:90:96:c6:76:7b:5a:a8:c5:ba:41:44:cf:87:f2:cd:
         e3:8c:8f:8f:e4:03:c2:49:c3:a2:dd:a5:dc:6d:e3:1e:7c:93:
         4d:fd:b8:29:11:c2:79:bc:94:b7:a1:ed:09:d4:a4:f1:a2:6d:
         4c:50:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:23:48 2024 by rpki-client on console-ams.rpki-client.org