Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2075570-0ede-304d-ab25-1321d3efd3ed.roa
File:                     f2075570-0ede-304d-ab25-1321d3efd3ed.roa (raw, json)
Hash identifier:          4gdzTXrRYx8axqkoZkB5BnElOi6uyeiIeZynNAYK1eo=
Subject key identifier:   6A:DC:F4:5E:9E:87:B4:13:39:DB:CB:1D:06:7E:57:4F:5D:93:76:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C68A07347E7F34ECC06900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2075570-0ede-304d-ab25-1321d3efd3ed.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        67.189.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:8a:07:34:7e:7f:34:ec:c0:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2be07c52-1d74-4640-8709-52d4a524aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:7b:e3:b8:6f:4a:33:30:5e:ef:b6:bb:c3:
                    db:ab:13:51:87:b9:9d:6a:bc:a4:80:ce:da:f9:b0:
                    8f:25:40:57:f9:2a:1b:71:0d:ec:14:91:0c:ab:e7:
                    85:3f:7b:ea:73:b9:8e:8c:6b:a6:e4:d1:b5:89:bc:
                    2b:7a:5d:53:18:5e:bc:21:70:a9:fb:89:c4:75:47:
                    8b:b8:41:7c:22:5b:c0:08:e9:d3:0f:07:be:5f:92:
                    56:d6:56:6d:f9:e6:8a:64:ff:47:b8:a1:88:cc:ac:
                    ba:b2:94:d1:e4:65:38:3e:be:10:74:85:39:49:5e:
                    41:c8:e8:6d:24:66:8c:ea:aa:82:55:38:54:47:61:
                    ae:c8:92:a3:f6:17:ff:d0:79:55:a7:3c:9f:72:93:
                    d2:a1:f8:b5:17:6e:62:37:e4:fa:2e:68:c7:2b:d7:
                    6b:90:a4:45:5b:64:96:a5:65:08:e0:21:65:6a:c6:
                    ec:02:02:12:17:11:71:44:7f:ae:94:28:20:2f:5f:
                    0b:12:a6:49:b6:2b:49:82:c1:f9:6e:ab:6b:3d:b4:
                    b5:72:80:f6:2d:cf:b8:e0:7d:bd:21:ea:09:ee:7d:
                    bc:8b:ff:92:db:48:10:3a:83:68:22:61:de:0e:da:
                    7d:76:fe:42:c2:45:d5:9f:c7:2d:89:e3:49:2b:e7:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DC:F4:5E:9E:87:B4:13:39:DB:CB:1D:06:7E:57:4F:5D:93:76:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2075570-0ede-304d-ab25-1321d3efd3ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.189.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:ac:93:e5:f9:74:d7:98:cf:1d:9f:5b:9f:01:88:54:d6:
         0e:08:eb:16:ed:11:49:13:cf:2e:b7:07:e1:f3:07:15:57:34:
         f6:3e:f8:ae:c9:c0:e0:ed:65:6b:d5:5e:0c:ce:6e:e5:b4:f2:
         7d:e3:dc:ee:0c:00:82:7e:04:68:a4:a1:c0:f0:8f:7d:df:e7:
         9e:af:3e:fa:db:90:e3:0d:d1:97:4b:11:26:ee:f6:4d:a5:90:
         c1:87:a3:69:9b:98:09:fd:6a:bd:46:6b:04:79:c7:f0:16:e2:
         8d:de:71:a0:8b:21:88:e1:c1:40:d1:2f:9e:4f:7c:c4:b3:b9:
         d0:7e:2b:b2:1f:28:d8:82:f9:39:7e:16:57:43:05:05:f0:be:
         12:a7:57:2f:2a:cc:9e:e0:24:93:87:02:bd:6a:ea:e5:98:c3:
         30:0e:31:4c:0e:b7:4b:db:95:56:40:73:93:ab:bf:5e:f6:10:
         52:73:5e:d3:6d:df:72:7a:18:61:58:a4:ea:1b:d4:7a:9b:c8:
         cf:cf:75:fd:d3:26:bd:1a:4a:70:d1:bc:0a:c7:8d:20:ad:b1:
         f5:13:d4:df:2a:2b:cf:e7:28:90:f7:64:89:52:f7:44:c8:7f:
         9d:f8:11:03:8e:8d:97:51:b9:f8:7e:94:5d:3d:7d:39:50:1e:
         ab:b7:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:11:33 2024 by rpki-client on console-fra.rpki-client.org