Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa
File:                     b004097e-cea3-32cc-a5e6-1459a1b252ec.roa (raw, json)
Hash identifier:          qXy5qILTu8h31OIuMSDo1O47de/gWbyvszR561Lg/64=
Subject key identifier:   0B:20:2A:7F:1E:5F:73:2C:8D:56:EC:71:1B:EE:D1:E9:0A:CA:FD:AA
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847C5151D804DDBD3F0E123C200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa
Signing time:             Mon 04 Nov 2024 17:36:44 +0000
ROA not before:           Mon 04 Nov 2024 17:36:44 +0000
ROA not after:            Sun 02 Feb 2025 17:36:44 +0000
asID:                     11233
IP address blocks:        192.95.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:15:1d:80:4d:db:d3:f0:e1:23:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov  4 17:36:44 2024 GMT
            Not After : Feb  2 17:36:44 2025 GMT
        Subject: CN=539d47b2-f3df-4241-862f-986297ebb973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:57:12:ca:ca:70:ee:81:a8:4e:8d:6b:4b:
                    f2:88:d9:01:10:f4:79:0e:b7:03:50:5a:f7:23:fa:
                    49:1d:6e:3b:6a:6c:27:ef:94:ab:62:a5:ba:58:1d:
                    c1:6e:7b:89:77:ad:4f:15:ce:e1:f0:04:11:8d:93:
                    f8:cc:96:d7:d0:c3:37:03:29:f1:35:af:79:41:0e:
                    c3:ec:a4:c3:ab:b1:15:01:71:53:8b:a3:fa:75:0b:
                    05:83:e3:2d:f0:e5:cd:0e:5e:7b:dc:67:9f:7e:80:
                    bb:f6:4f:ba:42:ed:4b:db:a8:53:6b:c2:66:63:49:
                    84:b1:f1:f8:5d:64:58:a2:bc:0b:c3:ad:18:87:77:
                    c6:cc:14:03:e3:fb:f7:5b:28:9c:73:7d:e5:1f:0e:
                    bb:42:f9:0d:2c:39:f2:03:e0:ac:af:b5:15:0b:e2:
                    bb:95:95:fa:e9:5b:1e:83:13:67:1e:6e:fc:f9:0b:
                    c8:0a:f7:ec:b6:00:4d:b6:65:57:5d:21:b0:ef:9d:
                    cd:06:9b:8f:dd:88:fe:1c:1f:b3:2f:cd:60:80:d2:
                    4c:84:be:a6:bf:04:32:87:54:a4:2d:b4:5d:cd:cf:
                    b9:c9:c8:44:6c:00:58:00:b9:3b:82:f0:a1:cb:54:
                    7d:78:c3:99:09:39:66:c8:4c:59:cb:8d:25:c7:4e:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:2A:7F:1E:5F:73:2C:8D:56:EC:71:1B:EE:D1:E9:0A:CA:FD:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:23:80:1e:92:9c:56:be:dc:9d:b5:77:5b:55:98:01:35:
         09:05:e1:98:77:ce:8e:ca:ba:0b:0b:a8:84:e7:77:73:90:66:
         95:b0:c6:91:4d:5e:b3:aa:37:a6:3d:7d:f6:27:a3:1a:7c:9c:
         5b:df:c5:10:df:a1:c9:39:b2:69:4f:3d:92:bb:17:98:9d:e7:
         a6:f3:2b:c7:66:47:c6:35:f9:6e:70:c1:62:11:4b:85:1f:57:
         d8:93:45:09:c0:73:fe:25:30:6b:6b:3c:26:98:31:0b:a7:42:
         27:8a:80:18:02:06:d2:5a:2c:85:29:aa:39:c8:bd:43:1d:3f:
         66:4a:25:27:b7:bc:b1:84:c5:2a:a7:5a:9d:54:ed:6d:36:f2:
         43:a6:ae:00:87:36:5b:b5:93:af:7d:5a:1c:a3:81:45:13:26:
         80:06:9f:9c:75:f8:05:80:9c:e8:d5:71:d5:37:4b:1d:49:d1:
         d4:3a:3e:de:43:93:17:85:b3:d4:a1:7a:2e:72:31:94:1e:01:
         26:64:33:e4:59:40:41:d6:1d:9f:d4:96:98:ce:2a:bc:d5:37:
         cb:ef:85:f9:dd:f3:1a:11:a2:79:a7:ed:c4:b5:ec:64:75:7c:
         f1:33:c0:e5:f6:ea:24:21:58:4d:7a:39:13:5b:10:ef:75:1c:
         60:e1:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----