Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/707bf668-a2c3-3bf5-90e7-d6aed878994d.roa
File:                     707bf668-a2c3-3bf5-90e7-d6aed878994d.roa (raw, json)
Hash identifier:          5LowhY5P8pohx9EyfV3quUH8F/lg9cEmeiQWjYGQv38=
Subject key identifier:   7B:9D:5A:C5:22:54:39:93:B3:E8:F0:C4:48:76:60:57:76:6A:9B:A7
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285847BC2C242BA526FA79B1CCF780
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/707bf668-a2c3-3bf5-90e7-d6aed878994d.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     13312
IP address blocks:        67.59.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:24:2b:a5:26:fa:79:b1:cc:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=1bf6e7c2-2cb5-484d-bfc9-1a5eacc3fa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:e4:b9:96:fd:27:b3:fe:bd:aa:b7:45:16:
                    9a:c0:c8:c5:2c:4d:33:41:8f:6a:6c:ea:b4:65:a6:
                    71:12:4c:83:b9:f5:99:b7:cb:c1:b5:f5:c7:63:a1:
                    93:4d:12:0b:d7:cb:3d:11:cb:68:e0:b1:a6:d1:bc:
                    ee:e6:8f:08:a0:06:fe:80:a4:ec:1b:15:6f:20:bb:
                    fa:0d:e3:32:72:27:46:c2:93:da:ce:65:59:1d:33:
                    e6:46:07:12:0f:f2:5c:9b:ef:b4:92:2d:24:40:5a:
                    39:7e:2d:31:77:96:f9:a2:60:16:a6:98:76:4d:f3:
                    2a:cc:1e:76:1c:b9:c9:74:b5:a0:98:f9:34:ce:20:
                    99:53:dd:5e:52:2d:06:13:fa:5e:8b:26:46:56:4d:
                    e2:4f:df:b4:74:00:c9:f8:e8:87:7c:8d:03:b4:30:
                    bf:ce:a5:99:14:c4:01:68:04:3c:74:19:c2:3c:83:
                    3b:f7:35:3d:2c:fe:bb:cf:bc:2b:f2:37:df:d1:ec:
                    c6:8a:ec:76:dd:13:af:38:6f:b0:e4:75:87:03:ad:
                    7e:0b:c4:2a:5e:6f:87:78:ae:8b:68:2f:cc:5c:6b:
                    fb:f4:f5:75:62:13:12:44:5e:ba:fc:b4:03:9a:69:
                    dc:07:ef:75:aa:8a:81:ff:38:ec:f7:78:ef:2d:80:
                    c2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:5A:C5:22:54:39:93:B3:E8:F0:C4:48:76:60:57:76:6A:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/707bf668-a2c3-3bf5-90e7-d6aed878994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:56:d8:0d:46:23:2c:b6:88:22:04:18:d6:be:de:5c:59:
         ea:49:cd:2b:64:d8:82:f2:9a:c7:c3:20:67:b4:f1:de:56:b5:
         1e:fc:fd:fa:16:b2:20:61:13:0e:07:e7:06:2f:16:ec:cd:ec:
         bf:bc:b4:1b:4b:cc:08:75:8e:34:d8:00:ef:83:ff:1b:ff:29:
         8d:6c:12:7e:a9:de:e9:7c:5d:b8:27:6c:3f:82:f5:57:2e:fb:
         9b:fb:8b:e9:87:0f:d7:50:41:6e:bc:d6:5d:e2:1e:68:a7:ff:
         3e:7c:bc:ae:18:27:8d:0c:b4:3b:08:98:d2:b1:d0:e7:05:9c:
         20:b8:e7:df:fa:02:32:09:b3:84:89:d1:0f:be:8d:33:bd:61:
         b1:ff:79:14:db:f5:c9:bb:ac:61:3d:b3:4b:c5:21:cc:88:f3:
         00:e2:4a:0c:27:ce:8c:09:99:b2:81:67:95:d0:de:ee:5b:ae:
         0c:68:66:5b:90:7b:d3:36:13:e3:9f:df:46:dd:71:1f:00:df:
         6c:76:5e:df:a1:1e:ac:8a:c0:ce:0e:05:3f:a7:91:fc:d3:56:
         5d:d6:76:47:00:f3:0c:2e:55:6f:2d:b0:74:9c:70:03:bd:68:
         89:5c:6f:f7:67:eb:78:9e:62:0c:d7:ea:33:bb:86:66:5b:67:
         fe:4e:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org