Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa
File:                     6da27189-1a29-38ed-b43d-3d65266b43d1.roa (raw, json)
Hash identifier:          TkXashXcESHg1yhwqAJ6BxtrUjR76izWx64gHXKAEVA=
Subject key identifier:   26:30:AA:62:1B:EA:AB:18:DC:2D:0E:F3:B3:5E:8A:56:E2:79:23:32
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285847792BB02546A3C6A853958900
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        192.94.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b0:25:46:a3:c6:a8:53:95:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=cf307fe7-adf5-4cde-8467-01d255c0349f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:bb:09:91:f6:d9:42:5d:8c:b1:1f:ab:40:
                    3f:cd:8a:18:f3:fc:de:7c:97:24:ca:a4:47:13:36:
                    cc:84:01:69:e2:49:a8:1b:5c:53:8c:35:0d:bb:6c:
                    61:2d:81:f1:bd:81:01:83:ba:24:8d:8b:e3:33:1d:
                    43:ae:3b:e8:50:e7:f4:5e:ef:e1:01:05:41:6a:03:
                    74:23:07:e7:b6:cd:80:4b:5f:ba:f6:ed:4a:c4:a5:
                    6a:eb:3e:0c:88:4b:2c:ea:f9:b0:e6:47:37:a4:14:
                    80:59:3d:48:ce:df:29:76:45:e3:2c:ce:4b:e2:42:
                    c3:38:2a:0e:f0:08:1a:a0:d6:40:6a:46:04:c2:96:
                    d6:f0:e9:a3:d1:53:3b:8b:a4:e5:02:99:73:f1:83:
                    82:00:16:a4:a4:a6:18:f3:32:59:ec:46:41:a4:53:
                    f7:ca:fb:df:4b:7b:12:64:22:3b:f9:fe:6f:88:29:
                    72:d0:bf:24:73:16:ce:89:58:e5:cc:96:57:90:83:
                    d4:e5:43:4b:94:45:05:b6:9d:bd:00:9e:51:ce:10:
                    2e:d0:f6:9b:c6:26:f3:20:5f:c9:fb:57:c2:4f:ed:
                    ea:ad:19:c3:c4:8e:9d:bd:84:ef:76:31:0e:47:a6:
                    e7:ce:b6:b5:ad:13:93:d0:1a:49:22:a4:6f:e9:7a:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:AA:62:1B:EA:AB:18:DC:2D:0E:F3:B3:5E:8A:56:E2:79:23:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:fb:4c:7d:94:f9:b7:76:ee:01:61:40:1e:87:9a:42:6e:
         5d:67:03:51:30:69:f0:8e:b4:24:46:17:e0:81:8f:e2:49:72:
         66:7d:9d:47:df:42:33:e1:0d:a1:13:3b:6b:6b:3f:23:3e:0e:
         bd:f0:aa:a6:c9:cb:56:44:c1:c6:b8:4f:00:ca:93:b8:db:41:
         5f:71:92:85:ec:89:46:f8:60:8f:f0:a8:e0:e2:71:11:a1:c1:
         01:cc:fe:8f:ea:45:fb:17:59:36:ac:a7:45:c1:97:ba:bf:da:
         9a:7d:71:85:98:34:31:02:fb:ff:69:d9:c7:a1:5d:00:6a:78:
         02:91:05:d9:ec:fb:12:21:60:58:50:15:45:91:b6:a1:1c:b5:
         be:fe:3a:13:a0:f9:4d:bf:b6:f7:11:10:13:72:06:7e:e6:7d:
         36:a3:ec:42:7e:d3:7a:1e:49:a9:51:33:6f:7f:6d:7c:51:a6:
         34:7c:fe:17:84:b6:38:3c:dd:38:ad:90:87:ad:47:f9:8c:e3:
         64:3e:42:e9:0a:46:5b:f2:95:60:71:cf:c0:e3:cf:cc:37:bc:
         d3:34:aa:09:bd:b2:85:7d:2e:d2:9b:bf:e4:f4:de:d7:ce:7b:
         04:41:3b:e6:5d:05:97:af:6a:9e:e1:3a:62:00:db:85:f8:4c:
         a2:74:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:03 2024 by rpki-client on console-fra.rpki-client.org