Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06382593-a468-3600-a6cd-04312e7d0f88.roa
File:                     06382593-a468-3600-a6cd-04312e7d0f88.roa (raw, json)
Hash identifier:          RCP9+Hu7FmM1Z5ZdbLWM0+XbDuKhJ4FFlCDFYD26wvQ=
Subject key identifier:   4A:6D:5F:7A:23:43:04:0E:4D:25:D7:55:E7:58:90:ED:F2:9A:E0:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C63DEB87FDEA383C1D5700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06382593-a468-3600-a6cd-04312e7d0f88.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        76.115.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:3d:eb:87:fd:ea:38:3c:1d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3d3e7b23-a6de-4473-b1c7-2c8f33db42f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:00:e8:55:6a:6b:66:36:c2:37:a7:cd:7b:
                    78:2f:58:f3:ed:e7:1c:60:a8:e8:1c:ab:51:dc:c8:
                    42:db:99:4a:ec:39:c5:65:59:93:91:73:b0:55:7c:
                    f2:24:79:82:45:f0:0d:7d:11:11:6a:af:1e:3f:3b:
                    e2:58:84:52:60:6a:9a:b2:83:c3:6e:c9:c9:c3:c8:
                    30:cf:df:e4:1c:4f:77:70:4a:41:35:e8:18:17:4b:
                    38:57:88:3a:07:78:a7:26:0b:b7:97:47:a3:39:5f:
                    ff:5d:0d:28:e6:dd:88:67:49:fc:8c:02:68:07:d3:
                    a7:79:6e:5d:b8:da:8d:b0:21:32:33:12:75:d0:54:
                    7a:45:8d:32:6d:a1:ad:65:cd:56:33:4a:04:5e:c5:
                    04:fb:b9:01:63:22:64:ac:99:0c:98:96:19:ce:06:
                    3f:b4:2a:81:f1:a1:54:70:42:3a:9c:75:4d:7c:61:
                    00:55:60:60:c3:b1:a7:f4:92:4a:5a:1d:6e:18:c3:
                    81:58:8a:82:1a:2f:1e:b9:41:bc:9c:8c:19:f1:81:
                    3d:e2:a9:e2:ec:90:4b:2f:a0:ee:f6:c4:5f:06:68:
                    b9:d4:d1:c9:26:a5:e7:b6:a7:ab:d9:59:e9:14:47:
                    98:e0:47:01:cb:f5:13:9a:cb:3e:45:b4:6f:8d:08:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:5F:7A:23:43:04:0E:4D:25:D7:55:E7:58:90:ED:F2:9A:E0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06382593-a468-3600-a6cd-04312e7d0f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:d2:4b:2c:20:c8:16:04:0e:86:25:85:bc:0e:24:da:36:af:
         aa:cc:94:49:f4:92:63:cb:29:e4:3b:bd:24:f6:a9:f4:9d:84:
         36:be:e1:07:dc:37:12:fd:c0:1d:3d:f8:24:9d:4f:5c:6f:c7:
         77:66:28:2b:b3:6f:69:13:b3:f8:21:e4:eb:0c:84:7f:f8:5b:
         f7:c3:f3:0b:54:75:4e:9d:6f:c4:53:19:28:56:9a:51:f7:83:
         f4:93:1d:e9:84:67:b6:81:e5:dd:fa:10:0d:83:54:07:9d:9f:
         29:20:ad:24:23:cf:6f:ad:5a:d6:c2:55:47:ae:a7:de:16:63:
         e6:2a:21:9a:28:2c:0c:4c:92:20:00:41:1e:4e:64:64:eb:06:
         b5:bd:39:10:78:65:08:9f:24:38:92:57:6a:8d:60:f3:21:ff:
         87:f6:85:d2:a3:2e:57:d9:3f:63:a5:4a:1d:dd:e6:fb:5d:4c:
         fd:c1:0e:95:9c:fe:07:44:14:3a:60:f0:fe:06:54:9f:cf:57:
         4f:1f:bc:60:07:09:ae:a5:64:ee:e5:a1:fa:61:aa:76:61:35:
         c4:49:67:15:26:b4:44:0a:af:dd:97:76:cc:03:48:03:ad:86:
         6a:f8:93:0c:5a:0f:69:f6:fb:c8:8b:3f:52:5c:ef:22:2f:2e:
         56:33:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:34 2024 by rpki-client on console-ams.rpki-client.org