Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a0d5137-1f35-3500-8a88-ee723b6e2c29.roa
File:                     3a0d5137-1f35-3500-8a88-ee723b6e2c29.roa (raw, json)
Hash identifier:          XSfMQTOtEGXNOCA32IgJHoFnYgVPcVZmTQQlUzQSeuE=
Subject key identifier:   14:2A:7B:8F:F2:40:37:EA:96:4E:BC:2B:90:8E:AA:20:D6:06:D7:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C83D0D2D4D46FF0EA532E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a0d5137-1f35-3500-8a88-ee723b6e2c29.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.30.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:3d:0d:2d:4d:46:ff:0e:a5:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=bca2ac0d-cd26-4373-b64a-049b2d54c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:56:42:01:2d:fb:16:dd:60:75:c9:57:e1:
                    5e:12:e4:84:4e:35:24:07:44:2e:f2:39:a8:92:5a:
                    2b:14:cd:a5:32:b7:3f:fb:3e:7b:64:74:44:96:cd:
                    32:21:41:11:ba:cb:b1:9e:fc:ec:a7:6e:42:7a:e6:
                    64:af:a4:ff:0b:87:ab:07:c4:42:f1:ef:d2:af:85:
                    00:0d:8e:ba:77:9f:bb:6f:be:f9:39:98:db:16:b4:
                    52:50:8a:d2:ad:00:b6:47:ea:b0:d8:e7:35:8c:31:
                    4c:86:a9:ab:2e:05:4b:93:ce:d3:80:ff:50:34:bd:
                    8b:68:64:54:ba:e9:d1:ec:af:09:3b:76:b4:e8:ec:
                    32:e6:05:3e:96:95:61:b9:aa:69:8f:38:ed:2d:cd:
                    20:7d:dc:9f:b5:bd:36:77:19:51:54:ea:73:c3:29:
                    77:c8:dc:91:7c:55:92:55:8f:11:7f:a4:0e:49:39:
                    4e:44:b7:9d:e5:1e:b6:16:c0:93:5d:f8:1c:2c:44:
                    04:6d:85:02:54:14:f5:0f:59:e7:e9:10:b3:48:31:
                    2d:21:29:09:a8:c0:0c:17:3e:05:c7:f6:8a:fd:f9:
                    ab:d2:39:99:dc:d9:f6:dc:85:89:ae:25:4a:39:06:
                    bd:c6:86:5e:3f:53:84:d0:1e:1b:30:5f:bc:6f:95:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:7B:8F:F2:40:37:EA:96:4E:BC:2B:90:8E:AA:20:D6:06:D7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a0d5137-1f35-3500-8a88-ee723b6e2c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:c7:c0:fd:3d:c5:d9:cf:b2:9b:64:43:61:e5:c8:0c:be:
         81:06:14:16:a1:38:25:ba:c9:4d:93:01:d1:01:f4:83:b7:9a:
         32:41:62:9b:13:ca:ea:64:20:de:19:8f:58:e3:ad:0c:9f:9d:
         37:0c:58:40:47:8d:e4:8b:10:c5:6f:cd:4d:5f:4b:94:9f:4d:
         20:95:2c:a2:1f:07:c9:7e:e7:60:85:93:95:94:09:ff:99:64:
         e3:78:99:59:61:e4:ce:19:6b:06:4d:1b:f7:f4:88:18:66:c5:
         20:bf:ff:33:6e:24:6e:04:ba:19:4a:ee:ca:d7:ca:9e:26:49:
         5e:5c:14:34:49:a0:d6:18:a1:2a:72:92:44:83:26:04:5a:9e:
         8b:73:55:1e:c0:a6:b6:2c:bc:70:76:14:d3:f5:f3:8b:97:e6:
         59:98:4f:a9:de:78:46:94:1c:cb:c1:d8:3c:dd:48:da:8d:c7:
         88:59:c4:4c:22:39:de:10:75:ab:c8:6c:dd:e9:97:ca:ce:a4:
         22:34:fa:97:30:b4:6c:98:dc:75:f3:18:49:e5:42:e2:4a:8b:
         1a:a7:c3:b5:4c:ff:be:a3:6c:5d:22:ca:3f:38:bc:c5:ef:cc:
         13:8e:fb:b9:bc:be:fc:98:49:08:e9:fb:a8:1a:72:fc:14:10:
         22:f9:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:59:49 2024 by rpki-client on console-ams.rpki-client.org