Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa
File:                     3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa (raw, json)
Hash identifier:          VWCHdRIifs4AhM7I5mEDSuzb77ZpWUmoJqtGMwsULSU=
Subject key identifier:   BD:2E:65:5B:51:B1:D9:38:B8:B7:56:2C:8B:47:F3:C7:29:54:BD:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB67F9FD1667EF2391FC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        76.156.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:67:f9:fd:16:67:ef:23:91:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a93f6dc4-cf94-4ab6-a4a2-dfcb559b0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:24:87:da:1a:cf:7f:d9:c1:12:0c:57:06:
                    8d:8a:d3:c5:f1:01:b5:68:87:33:5a:15:a0:8b:d0:
                    c4:c5:1c:bc:37:59:67:ba:94:c8:ca:72:00:47:41:
                    08:19:b9:2f:f4:be:78:9e:d1:9e:0c:75:21:7b:3c:
                    35:ba:8d:e3:9f:ff:18:87:f8:d9:69:25:7f:8c:a1:
                    c4:51:ac:ce:3f:f5:27:89:68:0a:2f:5e:39:88:2b:
                    09:fc:b0:ec:b3:66:99:1d:2e:4b:dd:c0:4e:a8:77:
                    3b:7c:d8:7f:fe:41:fb:67:2f:c3:71:f3:d0:af:a5:
                    52:f9:48:5f:53:4e:c8:0f:1c:e0:f5:27:92:20:73:
                    f1:c5:b8:5c:9f:c6:ca:31:82:3e:4d:b7:12:57:40:
                    6c:da:30:49:42:1e:3a:98:b8:a5:f7:50:e3:4e:c4:
                    1b:84:cf:fd:1b:81:4b:6a:a5:cf:91:03:67:b4:f2:
                    46:cd:33:26:49:6d:31:04:81:63:7f:ee:4a:b8:fb:
                    76:86:a9:46:49:c7:19:4f:e8:55:e0:a0:d1:ba:c3:
                    d7:62:2f:38:b3:f6:3c:cd:91:e3:ca:b9:c5:3a:ed:
                    5d:c2:65:df:39:11:80:a6:a5:44:88:f9:61:3f:51:
                    cf:f0:f1:26:1a:2d:18:9c:75:73:0a:67:7d:e9:f0:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2E:65:5B:51:B1:D9:38:B8:B7:56:2C:8B:47:F3:C7:29:54:BD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:87:3b:93:58:e0:47:5b:33:bc:ab:ab:1a:37:6b:7e:6a:b8:
         3d:4d:2a:29:7d:c1:00:0d:67:b1:70:52:a7:0f:60:f9:ea:93:
         5b:d3:69:86:84:cf:8f:31:cb:79:7d:a0:d7:1e:68:90:ff:7e:
         12:67:16:e2:75:4d:0f:89:c9:30:28:e4:4b:ed:ba:54:b2:39:
         50:3f:b6:88:e3:a3:ae:63:92:83:3f:63:a2:d1:66:c8:71:91:
         46:1b:4f:93:93:43:8d:ff:67:a7:72:28:e0:f6:70:58:55:39:
         e3:7f:55:02:ac:59:39:bb:79:f7:0a:d8:51:8e:ef:41:59:99:
         a9:75:de:a5:76:41:ef:cb:27:af:2b:98:03:21:4f:a2:77:c4:
         c3:d4:8e:6e:d6:ec:7b:cc:d4:bc:55:c2:89:c5:33:65:ec:4f:
         b8:e8:cf:37:07:85:06:74:96:ff:06:0f:81:f3:8d:e1:51:1d:
         6b:ee:56:85:77:f3:18:79:bd:be:cb:99:6f:fc:5b:a8:36:16:
         89:78:17:af:2e:c3:48:83:6b:b2:36:45:21:f9:ff:cf:6a:43:
         7d:95:9e:9b:5d:cc:cb:49:7c:27:7d:d1:10:9e:cf:5b:5f:6e:
         f8:0b:48:89:4a:8a:93:28:c3:cc:0d:86:b7:a2:c8:0a:d5:a7:
         42:17:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:52:58 2024 by rpki-client on console-ams.rpki-client.org