Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08cff1e6-7094-39c9-a5ec-2a507a3f932d.roa
File:                     08cff1e6-7094-39c9-a5ec-2a507a3f932d.roa (raw, json)
Hash identifier:          SPv0J/YyJxdlExQlzyQ0bVTiXmU6el3TKLG8X1xEqas=
Subject key identifier:   6F:BF:EB:3A:DC:AA:50:C0:33:27:1B:90:8D:ED:AE:93:21:B1:49:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF9D7D3E60CA5611BF5D100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08cff1e6-7094-39c9-a5ec-2a507a3f932d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33490
IP address blocks:        96.119.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:d7:d3:e6:0c:a5:61:1b:f5:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c0e8bf5a-0dcd-436f-8f72-f62e53257161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:e4:ae:9c:16:3c:29:fb:2d:89:27:7d:27:
                    29:8a:3a:01:f7:56:e6:e1:c5:27:ff:71:5e:08:14:
                    a1:7c:40:1f:b6:d6:0c:32:5f:32:c5:33:b4:3a:55:
                    1b:38:b6:0a:c6:05:68:fc:eb:6f:64:26:88:60:7a:
                    34:f3:2c:2c:9a:4e:6a:82:f5:67:26:d8:f4:f8:24:
                    5f:02:19:72:ff:d8:c2:6a:90:1d:2e:78:e1:cc:c1:
                    48:58:46:e2:f6:50:2c:89:ee:49:e9:6d:98:cb:2a:
                    53:db:0e:5e:39:03:93:5f:47:11:66:e7:a1:9a:81:
                    66:d2:29:56:ae:22:ff:a9:ae:ef:f6:f5:ae:8a:2c:
                    f0:17:88:a4:3c:1b:58:95:43:45:0f:1c:3e:61:51:
                    b7:21:81:cf:d0:cf:57:9a:2d:00:bc:fc:cc:8e:86:
                    39:75:67:a5:29:a1:40:19:f4:a1:8a:48:69:92:e5:
                    67:4a:47:43:54:9b:1f:a5:bf:1b:42:81:d7:42:1f:
                    f6:64:d7:b0:14:9d:50:08:56:6a:81:73:81:cb:f8:
                    b0:b3:3c:e6:38:aa:8e:e6:cc:72:4f:fd:3e:88:9a:
                    0d:75:29:75:21:54:32:a1:4c:db:70:f9:25:8b:5c:
                    c2:f8:af:2a:21:6d:8f:d6:9a:2f:cf:ab:7f:27:69:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:EB:3A:DC:AA:50:C0:33:27:1B:90:8D:ED:AE:93:21:B1:49:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08cff1e6-7094-39c9-a5ec-2a507a3f932d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.119.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:34:de:72:c2:cd:0a:f6:39:24:05:30:9e:a0:ad:72:34:21:
         4e:d6:c3:6e:f0:da:d3:71:86:59:f2:84:5a:c3:04:3f:08:4c:
         b6:1f:06:a5:f6:26:a5:9d:0d:91:91:cb:18:6f:54:68:ca:3b:
         12:b4:79:a5:9e:87:54:9d:71:58:a5:08:ea:ea:b9:c1:51:73:
         3b:04:1e:1d:1a:7d:18:f3:0e:08:84:f7:2b:b2:7d:23:d0:86:
         d6:d0:89:78:c7:27:55:19:88:7d:ce:ad:15:19:76:ac:7a:5a:
         04:7c:09:dd:57:4e:88:a9:7e:88:27:13:b9:4c:47:ca:e4:c3:
         38:b4:4d:04:22:19:be:c7:3b:40:12:76:77:63:bf:e0:2c:47:
         8f:ce:72:b5:50:a7:92:f8:56:77:19:1f:90:30:91:b6:98:7d:
         08:f9:d3:fb:ef:e4:b9:06:e6:06:82:ea:5e:5f:fe:ac:16:b2:
         cb:7f:49:f5:fc:7b:0a:d1:4f:92:46:c5:85:ae:3f:1e:e4:ca:
         86:eb:a2:08:ba:11:0d:77:f4:55:34:12:00:64:e7:cd:93:47:
         10:5b:08:41:f1:ba:78:7d:70:ed:b3:28:4c:92:fc:92:68:3d:
         15:70:27:41:a9:40:09:e0:c3:6c:94:7b:ec:ce:ae:93:2b:e9:
         1e:19:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:46 2024 by rpki-client on console-ams.rpki-client.org