Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07d1067b-3072-36e8-8646-f97fbe80d1e3.roa
File:                     07d1067b-3072-36e8-8646-f97fbe80d1e3.roa (raw, json)
Hash identifier:          tcqaFwaMhpUBhDR5srT2ll/vKsiLS7uv6Y78sZIx87Y=
Subject key identifier:   D4:6A:B2:85:89:B2:4F:B9:76:02:94:8B:87:D9:CA:60:7D:A3:08:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C63F5749ECC29024066FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07d1067b-3072-36e8-8646-f97fbe80d1e3.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        76.115.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:3f:57:49:ec:c2:90:24:06:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7640e8a0-8aeb-46af-95aa-91a44999e9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:85:5c:01:f4:e5:d5:59:09:b7:85:3d:d1:
                    87:5a:17:e1:6a:57:8b:d5:1c:d4:73:ca:ac:64:05:
                    42:d5:64:78:41:0f:9d:f7:22:e2:60:fb:de:03:39:
                    50:d6:02:16:57:3f:8a:43:83:d5:95:30:6a:54:6f:
                    54:06:d7:a4:45:34:87:04:72:0c:eb:c2:f0:48:fc:
                    a0:18:a7:ca:9a:63:12:07:34:24:d8:78:68:e3:af:
                    d7:93:6f:0f:2b:e5:29:c6:06:60:5b:26:d9:72:73:
                    e1:60:4d:1c:93:d2:19:99:f0:2e:0d:b5:60:be:c8:
                    8f:c3:ab:15:b6:24:32:ab:42:97:8d:3b:a2:b9:e1:
                    bf:b2:12:3d:43:2c:28:0c:db:90:95:e7:ff:62:e3:
                    e9:e0:70:75:02:82:73:a1:d1:69:4b:f3:f4:3a:7b:
                    a9:5a:f9:08:0f:af:23:8b:65:6c:1b:45:52:ec:c2:
                    59:1a:be:24:a6:13:69:2e:ad:b8:44:27:03:1f:b6:
                    6f:e7:74:d2:c2:13:59:6d:a3:90:54:aa:9b:1b:47:
                    c8:63:df:81:95:05:d9:98:4d:3f:88:4f:62:7f:6e:
                    08:6a:d8:34:53:1b:29:23:15:3a:a8:24:c3:e3:4e:
                    30:7c:03:18:20:de:fe:ae:25:aa:9c:c3:93:c4:32:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:B2:85:89:B2:4F:B9:76:02:94:8B:87:D9:CA:60:7D:A3:08:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07d1067b-3072-36e8-8646-f97fbe80d1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:57:43:24:9b:9e:4e:c9:5c:39:4d:24:9e:a6:84:97:f0:f3:
         2e:7e:a4:da:ef:c9:1e:a4:8a:f3:e5:d7:0e:b1:96:fc:53:31:
         b8:d1:1d:35:ac:5d:fb:15:b1:98:29:12:f1:17:2e:6d:09:64:
         9b:e0:fd:5c:6f:b2:49:da:94:67:7a:64:d0:90:50:6f:47:a5:
         a7:62:2c:5f:5a:b8:9c:ad:23:d0:92:2a:39:a8:c2:c8:4b:79:
         27:a1:a2:39:e0:7c:60:ff:c1:54:5b:98:d5:f3:e3:c4:fa:f1:
         85:c3:ea:70:79:aa:24:52:c3:b8:58:4d:de:0b:dc:70:84:fc:
         9d:82:bd:f5:da:f9:a2:9f:85:fe:d5:11:14:4c:a4:0f:61:4f:
         52:80:05:0f:29:bb:05:d0:a4:a8:36:72:cd:5b:76:13:d3:1a:
         f7:3e:d3:db:13:7d:53:17:d5:fc:bf:4d:74:0e:b2:ef:1a:92:
         35:4b:8d:c8:74:24:44:6c:19:52:71:9b:a9:6d:1e:fc:90:78:
         18:1a:6d:fc:5f:f4:12:2f:52:df:f8:06:10:8a:68:43:0e:88:
         fd:bc:4a:dd:60:d1:b9:7c:fa:7f:f8:f3:02:e3:2a:8a:cc:fd:
         48:76:1a:fb:1b:8f:ba:b9:fa:ff:63:1d:e1:28:cb:39:3b:03:
         50:e8:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:18:29 2024 by rpki-client on console-fra.rpki-client.org