Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa
File:                     face43ac-4888-37eb-a48c-4e74a5bdb29d.roa (raw, json)
Hash identifier:          H+xBnxZJHB+TxNnuTLE9bo/dqm+BEDhKKJOJechy+2I=
Subject key identifier:   4C:F0:05:3B:23:23:4F:80:FD:33:42:22:1A:45:9B:E1:C1:FA:05:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA8D0CE9C4A4F2FBC35900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33662
IP address blocks:        173.11.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:8d:0c:e9:c4:a4:f2:fb:c3:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a1700a84-ec62-4c09-a9e7-41eb3f706a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:2f:b8:c5:03:d3:4d:19:90:7f:ec:e1:05:
                    e7:ae:99:07:87:72:61:d3:e5:25:56:aa:c0:b2:87:
                    28:c7:da:25:19:f2:cf:17:71:f3:41:a0:de:d8:c7:
                    f8:44:fe:10:94:f8:31:47:fe:b1:98:f0:d1:6e:2b:
                    5e:ab:d6:60:90:0b:a1:ff:74:84:55:77:1d:3c:cf:
                    37:95:4d:51:cb:e2:74:bf:66:71:82:25:4e:6e:c9:
                    7c:38:00:7c:4f:11:a7:be:f4:14:ff:dd:03:c6:95:
                    ed:77:b6:d0:2c:29:9a:4a:58:f5:a5:ce:c7:72:8e:
                    ad:41:55:12:ef:21:3d:80:c8:98:8a:1d:af:26:b6:
                    96:6b:91:f9:cd:03:04:d3:2c:fe:0b:53:78:e3:2a:
                    81:39:4b:78:55:93:f3:0e:32:94:94:cf:ab:bb:65:
                    fd:de:48:1e:88:b2:b3:77:35:91:a2:c7:e7:80:83:
                    b4:c6:0a:d5:1f:fa:13:54:15:cd:2e:b0:9c:e9:96:
                    1d:96:67:3c:29:69:c1:b5:90:fc:87:82:0e:1d:a6:
                    dd:94:01:1c:83:33:a0:a8:19:ad:0a:94:b3:6a:c6:
                    b1:60:b5:24:a3:c3:3a:aa:c5:7d:fd:9b:b5:d2:5e:
                    f1:84:d0:1b:42:87:6f:50:37:12:fa:9a:de:c5:a0:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:05:3B:23:23:4F:80:FD:33:42:22:1A:45:9B:E1:C1:FA:05:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.11.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:57:f0:fe:45:ea:1f:7a:03:4b:7e:e3:2a:df:a6:e2:ee:01:
         2c:0a:e5:62:c4:45:6d:1c:cf:d2:19:d6:c1:07:65:d8:3a:2d:
         f8:2d:c4:33:38:9c:84:62:04:a6:c5:7d:3b:8d:13:0f:1e:33:
         cc:b1:32:77:b6:2c:9b:70:75:b5:d2:60:31:8a:eb:58:d2:94:
         e6:37:b5:dc:91:98:bb:f3:67:7f:8c:c4:b1:75:c4:4e:f1:21:
         d3:62:4d:a6:bc:dc:29:bb:3f:da:ed:b8:05:d8:cd:93:38:c4:
         26:bf:5c:b5:0f:82:29:8e:d3:81:e1:21:e3:76:88:77:0a:53:
         38:43:d3:83:6d:a1:77:1f:d0:c4:15:84:48:7d:d1:08:a5:ec:
         5f:3d:28:3e:69:02:73:57:9f:69:0c:b0:66:96:dd:75:c3:1e:
         de:6c:3c:4a:23:57:4c:9f:82:d1:f4:91:5b:8b:bf:35:e3:42:
         cf:cf:50:30:22:0a:93:10:02:a6:f4:d7:41:3d:a7:ad:33:ed:
         c9:76:5e:17:f2:da:25:19:10:04:93:08:94:7b:b8:c0:07:93:
         b0:27:76:b4:1e:db:0d:45:ef:b6:dd:bb:87:4f:c7:e8:ed:6f:
         99:cb:b8:90:85:01:57:98:83:88:c3:2e:c4:19:6d:06:3f:76:
         2f:ec:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:49:39 2024 by rpki-client on console-fra.rpki-client.org