Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa
File:                     f325b92f-db94-39b2-86f1-3253370dd766.roa (raw, json)
Hash identifier:          v4wQ4plrC1s6/4dwQ1Nz7PgNGGJJvPuSRQyttV4z+8Q=
Subject key identifier:   57:A8:C9:A1:BC:AA:24:23:79:2D:03:81:7B:EA:F1:B1:68:5E:6C:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C69661D2E666C4ACB59580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        71.235.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:96:61:d2:e6:66:c4:ac:b5:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=bc5194a0-049d-4f5c-941a-4b5ca58745a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:a5:7f:ed:45:f3:d7:62:49:dd:e2:36:34:
                    12:14:83:51:da:d7:85:4b:98:bf:1e:8a:cc:49:b3:
                    03:04:13:1c:bc:fa:f6:dd:95:3e:ab:e0:1b:8f:81:
                    88:cb:c2:88:9e:a9:a8:d6:96:1d:d1:0b:e8:31:39:
                    f7:be:67:bb:46:1a:6d:c4:0a:32:30:22:9d:fc:00:
                    5f:60:99:90:72:e1:f7:0e:ce:08:bb:8a:36:ae:fc:
                    e5:38:7a:54:97:16:48:e2:ba:b2:1d:9e:2d:3f:b0:
                    08:c7:88:76:c5:10:53:9a:68:92:dd:d5:80:4f:fe:
                    73:63:db:f9:23:f6:ff:da:90:dd:1e:e1:bf:a7:fb:
                    e5:16:71:d0:2c:38:9f:0e:08:19:e9:8c:e9:c3:54:
                    32:83:59:8d:b6:f5:5e:21:42:00:9c:6a:86:be:2e:
                    bb:f0:4b:8e:22:6b:06:e6:c6:c1:56:62:b4:f4:95:
                    21:09:ef:ba:14:52:ba:18:46:2e:64:79:ae:80:fc:
                    14:f1:f9:fe:b6:f1:65:98:a6:ac:61:da:e0:03:df:
                    16:f8:20:c2:f7:23:06:10:c4:5f:32:ae:b2:67:3c:
                    6c:cf:d7:7c:06:c7:8c:3b:74:a9:24:19:66:65:42:
                    43:b6:41:26:a2:2e:a1:cd:22:8b:44:23:0d:3c:6d:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:C9:A1:BC:AA:24:23:79:2D:03:81:7B:EA:F1:B1:68:5E:6C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.235.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:b0:c5:8c:8c:80:57:5b:a0:4a:ba:57:f9:18:91:36:d6:
         19:6b:18:6c:ca:8c:87:ea:62:dc:6d:9b:76:3f:1d:f7:6f:b7:
         50:d8:e4:8b:92:f2:a9:21:36:23:60:4a:92:ec:6c:1c:5a:e8:
         63:3e:04:0e:82:bf:bf:9b:70:83:16:e6:33:0e:a5:22:43:aa:
         6f:4b:c6:7f:6e:8e:c0:aa:81:68:4f:b2:04:0d:6d:3e:34:1b:
         fa:11:fa:5b:2f:f0:09:2b:f9:2a:6c:d2:a5:bd:7a:8e:f7:3d:
         80:b6:b4:79:25:8f:f6:fb:4b:92:19:ac:4c:d5:33:b9:92:04:
         21:68:48:72:20:3a:3d:1f:08:d3:ab:87:76:1e:92:03:5c:df:
         ba:fb:35:56:bf:ca:a9:18:21:80:70:6d:a8:08:cf:8f:a5:c5:
         7e:2a:4a:d9:b8:5c:b5:f4:f7:be:64:79:5d:14:ee:79:69:22:
         24:9e:04:c9:96:96:f4:7f:56:8e:da:c3:66:a3:22:39:d2:4d:
         b9:f6:bb:47:7d:04:fe:08:bc:64:4d:1c:24:a4:e9:02:12:24:
         cd:52:ca:e9:40:1e:8a:48:3e:6d:99:a4:bd:2f:61:0b:29:df:
         6f:1e:7c:a1:82:f9:7f:ee:f5:e3:35:4f:59:f2:68:8b:52:9f:
         4f:14:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:38:12 2024 by rpki-client on console-fra.rpki-client.org