Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa
File:                     20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa (raw, json)
Hash identifier:          ivlkqvVk2Hh82PmDZQPT2oIoIam98BH1x/XYzVzHNwU=
Subject key identifier:   FA:FD:54:14:8D:10:A8:43:41:E9:C6:B1:57:4A:AC:6B:F0:85:FF:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5FBD27C752939883A9100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.111.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:fb:d2:7c:75:29:39:88:3a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=fb6d1e67-3c71-44b0-bfbd-461e5312fc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:d5:d0:b6:10:79:d2:a6:f1:1e:e2:e3:4f:
                    90:0a:46:e6:63:a9:92:40:7a:3c:27:b3:d4:bc:51:
                    c1:2d:29:05:37:b6:04:f3:cb:91:e9:45:17:04:10:
                    de:15:11:c0:d8:ce:3d:cc:c2:98:ff:7c:ed:12:54:
                    95:c6:4c:42:9b:4c:14:37:3a:48:97:c5:eb:85:0f:
                    c1:d9:ec:8f:19:38:ff:ab:5b:e2:07:2e:75:2a:36:
                    05:6e:e3:8b:b6:fb:96:3f:3a:f8:71:5b:3a:2a:1d:
                    7e:63:6b:53:48:62:2a:17:ef:73:8d:8a:bd:38:63:
                    80:c5:55:b6:b5:68:59:54:9d:7e:4f:c3:da:be:da:
                    89:91:d2:0d:dd:14:ea:34:a6:76:28:87:b3:7c:a0:
                    72:36:15:0f:8e:31:72:1d:cd:1e:98:9d:4d:da:6f:
                    5c:9c:cd:41:dd:6f:a2:fe:2c:9f:4a:71:89:51:dc:
                    b1:f9:50:ae:9b:5e:d5:44:4a:e6:aa:2b:45:46:b0:
                    7e:03:8f:3f:f8:b3:8d:0b:10:42:46:8b:ba:ad:57:
                    7c:9c:4e:aa:b0:8b:81:a6:14:e5:19:ea:d1:78:ee:
                    b3:74:2a:47:38:6d:f6:86:f4:02:8c:37:8e:51:a3:
                    e2:a6:85:f6:fb:ef:e1:da:fb:e0:89:5d:a5:d1:d1:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FD:54:14:8D:10:A8:43:41:E9:C6:B1:57:4A:AC:6B:F0:85:FF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:79:d4:b9:64:3a:e1:87:fc:c9:76:6c:82:06:91:ff:15:e8:
         43:a3:f7:5a:bd:d1:a8:ce:0a:e6:08:c6:78:62:e4:4a:19:8d:
         9b:88:57:75:1b:3a:f2:a5:48:f6:61:3c:85:59:95:07:c7:ba:
         f7:4d:55:5b:4f:91:f4:06:ef:d4:67:8d:64:a9:99:78:89:e2:
         f6:d8:f0:c6:e9:90:ba:7a:25:57:99:d5:8a:f9:ec:72:53:42:
         f2:9f:d5:6d:96:93:44:26:52:42:40:fb:94:59:74:3f:44:57:
         9e:95:5b:b4:d8:85:01:50:d3:09:c1:48:96:10:31:17:f1:c6:
         47:7c:27:4e:26:6e:1b:ca:d0:c3:90:0d:c3:f7:8e:41:76:3f:
         a7:9e:3f:d9:56:85:81:78:06:7d:cf:9e:4d:fd:65:24:53:d8:
         75:b7:54:c6:71:bf:2f:c6:11:11:45:7f:79:b3:bf:ca:be:3f:
         c3:2c:ad:17:b5:f9:6c:60:1b:7d:bd:fc:8b:f0:49:ae:8b:75:
         02:24:aa:50:41:14:a4:e7:69:c4:05:33:45:f1:76:c3:a0:df:
         37:dc:82:38:e9:4b:fe:0b:7a:f7:59:40:26:60:db:dd:50:38:
         55:0a:d7:97:dd:f0:af:86:4c:db:ba:13:40:ae:dd:9d:05:5d:
         7a:dd:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:12:47 2024 by rpki-client on console-ams.rpki-client.org