Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa
File:                     30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa (raw, json)
Hash identifier:          kLfiSo4ETymhn5pyt7lGHxyn1PHPNMoQAzkBowhhzOw=
Subject key identifier:   32:E4:E2:EF:61:48:09:95:35:40:A6:FD:24:D5:F8:DA:EF:B8:73:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D8278639F39832DB16E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        76.133.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:82:78:63:9f:39:83:2d:b1:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=18726f62-0972-4215-9d9c-30494688f6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:ac:02:08:04:d7:5a:46:52:64:82:36:49:
                    b4:fb:12:71:bb:66:42:37:3f:72:61:35:44:cd:73:
                    b0:ac:7e:fa:01:f8:70:8a:c2:d3:db:b2:61:c9:82:
                    81:23:49:cd:d9:b5:df:89:e0:55:91:38:2d:4b:ab:
                    82:22:1f:6c:88:61:61:b2:d7:e8:c5:31:26:82:5d:
                    aa:de:03:34:29:d4:94:a1:ad:59:c0:4c:a1:41:43:
                    a5:28:be:2e:6b:91:49:af:e6:4e:75:26:58:6f:5f:
                    19:24:54:17:b5:be:d7:ca:c0:ef:09:db:60:26:e2:
                    6f:f4:ed:c3:18:d7:9a:4d:67:c6:03:5d:50:06:10:
                    36:bf:bd:f1:77:c3:86:74:38:33:4e:6f:13:4b:14:
                    a9:53:21:77:6d:8c:b7:aa:94:18:f8:c6:d4:20:87:
                    05:64:5f:46:8f:c5:2a:f4:64:33:74:38:47:b1:74:
                    67:31:7b:c4:47:94:fc:72:64:04:8d:02:34:ed:2f:
                    7d:c6:54:6a:b6:c8:e4:f7:5a:44:48:dd:77:35:dd:
                    1b:2b:9f:89:40:03:b0:51:f5:9c:b4:04:e5:0a:4e:
                    9e:ad:fd:7d:ab:83:f2:07:bf:5d:6b:7d:80:48:e2:
                    64:08:a0:49:e1:9f:e3:1b:43:8f:24:81:45:d9:6d:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:E2:EF:61:48:09:95:35:40:A6:FD:24:D5:F8:DA:EF:B8:73:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:df:4f:6f:1e:80:cc:f1:b2:41:91:f3:14:e1:93:db:a2:
         9e:5c:78:37:48:79:2e:1e:6c:e9:57:64:18:1b:00:2a:fc:8e:
         a4:f5:0f:f7:df:23:7b:15:3d:cb:10:bb:68:18:fc:9a:e4:cc:
         b8:4f:a4:cc:29:aa:d3:1e:04:81:68:25:0f:f7:73:f1:95:55:
         37:d4:cf:6c:7b:49:eb:0f:da:27:04:ea:2c:97:21:8f:93:e9:
         67:df:a1:65:92:74:63:a3:8e:27:73:4c:fd:4e:fc:d9:03:a0:
         e1:ca:4d:b3:22:5a:b7:8f:b3:8f:4c:c4:76:be:e7:01:83:94:
         29:28:67:5b:7e:eb:e2:cc:1e:25:dc:0b:46:17:7f:8f:ab:80:
         0d:38:21:36:35:f9:ed:89:c3:de:8c:1d:a5:8b:2d:77:c0:7d:
         80:9b:60:b2:38:d0:79:48:a8:ae:d4:58:0d:67:fc:27:f7:6f:
         89:51:75:3c:97:29:ea:6d:62:29:7d:de:e9:6f:6a:56:c4:ab:
         dc:69:1a:76:0a:77:70:85:97:87:c2:62:ce:10:70:b0:03:a8:
         51:6c:4a:ba:4f:1c:b3:1c:bf:83:46:a4:72:14:89:29:55:eb:
         49:84:3d:ec:40:53:6c:07:94:c8:71:22:1b:7c:6d:0d:d4:89:
         66:db:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:21:54 2024 by rpki-client on console-fra.rpki-client.org