Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af3af6-c3ba-3f8e-8eba-1f47c6a6776e.roa
File:                     20af3af6-c3ba-3f8e-8eba-1f47c6a6776e.roa (raw, json)
Hash identifier:          eJbeBsZOT/KsXg4rVw7gR3vAgwzByhCsAZmU2xKt4TE=
Subject key identifier:   54:29:C5:62:A8:03:61:07:D3:2F:77:91:D7:F6:24:7F:B6:9B:00:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7D301DD44C8F6DB2CE500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af3af6-c3ba-3f8e-8eba-1f47c6a6776e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        76.112.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:d3:01:dd:44:c8:f6:db:2c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3826ec59-93b5-457a-90eb-2f6ea3406fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:0d:bf:8d:74:9f:db:ea:65:27:22:f7:6c:
                    af:16:57:1d:6b:02:d0:d5:30:ab:3f:22:08:3a:b2:
                    de:8e:76:87:83:6f:63:f4:6c:61:1c:25:18:fd:a9:
                    b4:e0:e4:e5:73:49:d6:d7:9d:b7:98:2b:1f:55:d1:
                    73:f3:8d:fd:e5:ba:c1:43:61:1c:d1:5c:00:de:93:
                    ca:ce:9c:15:3e:c0:2a:04:cc:c0:ad:fc:3c:2f:01:
                    4c:60:85:96:f1:58:f9:ba:e5:e2:97:ea:d5:a8:02:
                    48:b2:49:cf:c9:f7:69:bd:b9:81:73:f6:56:5e:fa:
                    88:eb:73:35:6f:9a:1b:e4:25:53:e1:bd:6c:9b:79:
                    c8:69:78:b9:6e:48:09:5e:e5:d6:58:93:bf:05:48:
                    e2:cf:c2:19:8e:f7:7e:c6:4c:fa:6a:cf:13:12:5b:
                    2f:32:10:7e:cc:a3:27:a7:56:b3:0c:89:61:88:ff:
                    d9:13:d2:d5:9b:63:26:29:72:e0:cc:69:99:ea:5b:
                    4d:18:c6:12:1c:3d:40:6c:61:7b:69:c8:58:ce:a3:
                    ec:0b:86:c7:69:d5:a6:ab:af:f0:69:95:11:e3:36:
                    c4:83:7c:c8:06:f7:a6:3a:86:41:70:29:93:f5:2d:
                    ef:01:b1:12:fc:1d:c2:aa:22:b0:df:61:c3:ed:f5:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:C5:62:A8:03:61:07:D3:2F:77:91:D7:F6:24:7F:B6:9B:00:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af3af6-c3ba-3f8e-8eba-1f47c6a6776e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7a:aa:9e:45:9e:bc:05:48:21:f8:c7:4e:d7:8c:75:80:bb:
         ac:06:b9:3d:85:04:4e:bf:22:c0:c0:b3:b3:43:44:d6:23:00:
         f7:ac:57:75:70:93:fd:a0:d1:d8:d4:31:b1:bb:54:b1:0c:53:
         a0:bd:c5:24:08:8c:f2:7b:a2:3e:3e:c3:d0:0c:eb:cc:51:e4:
         4f:1b:7a:6f:fe:fd:0f:a0:51:e4:63:09:d0:dc:f4:f6:64:4a:
         b7:8b:8b:5b:76:80:6d:99:64:e7:35:f7:01:14:b7:9d:f2:61:
         3b:6c:8d:09:b0:d0:2c:9b:29:92:fe:4e:02:95:f5:24:0d:db:
         3e:fb:31:50:27:e5:d6:d6:ca:15:24:80:f4:1b:81:3d:2b:d7:
         d4:ce:cd:6f:b5:b5:fd:3e:bf:13:c9:b7:b4:a5:77:0e:fd:99:
         08:14:7b:22:b0:e9:3a:14:56:06:5e:5b:3c:dd:60:03:87:6a:
         4d:f4:04:b2:ca:1c:cd:64:b9:b7:f4:28:a4:1a:2c:54:79:c0:
         2a:33:7d:48:70:02:1e:f8:74:df:da:86:fe:31:dc:69:b2:79:
         ba:28:0f:9e:ad:e0:aa:1f:0d:ed:84:1c:ac:c2:99:b0:86:0d:
         b9:d4:bf:ed:b3:30:6b:d2:e0:78:46:3a:93:bb:11:40:ef:8b:
         87:2a:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:42:46 2024 by rpki-client on console-fra.rpki-client.org