Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa
File:                     3c3bf96c-c691-3476-8f6f-85850e875540.roa (raw, json)
Hash identifier:          +YMkJKB3vgSxd5836CuuCv3YbZVy4Wy9C+c8bgyLkPI=
Subject key identifier:   C1:25:4F:C1:C0:B8:D4:22:47:8A:61:28:FC:10:80:B5:90:EC:FE:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C74CB99ABB71E76AE81E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        76.19.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:4c:b9:9a:bb:71:e7:6a:e8:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=014d66d6-3011-4c6c-8254-4283b9382d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:f7:8e:2d:32:6d:76:ea:b4:86:6d:ae:49:
                    11:20:30:67:0a:38:28:97:72:47:57:e5:c5:a6:47:
                    88:7b:93:6e:d4:6a:b4:84:15:cc:e5:cd:db:78:12:
                    f2:18:ca:e4:76:6e:87:18:ef:30:d6:00:9d:fd:6f:
                    8b:77:8e:3e:a9:77:48:3f:b7:85:93:25:2e:e3:0f:
                    48:3a:c1:15:6e:62:ed:75:86:ae:22:bc:47:55:0f:
                    e5:6b:93:a7:4a:bf:43:85:c4:51:ba:da:70:ed:ec:
                    23:f9:92:26:93:a8:e1:ea:b8:8e:a8:81:2f:ec:45:
                    c7:94:1e:98:46:b6:2c:18:0f:09:7c:32:50:77:7f:
                    d2:66:8e:07:98:0c:dc:83:c9:e0:f8:55:24:cd:b0:
                    c7:5d:4f:ad:cd:49:c0:78:0c:7e:fa:6a:bb:18:20:
                    0e:31:bc:69:1a:b6:43:26:fe:4e:c6:af:10:be:d4:
                    53:d3:73:d7:c1:f1:ef:aa:45:2b:b2:93:0e:85:ef:
                    46:e9:af:ec:58:8b:08:60:71:66:7e:52:ef:0c:d6:
                    cf:66:96:3a:3f:d3:c6:3a:63:4d:18:a1:a7:d4:72:
                    13:5c:13:15:16:2e:14:f8:d0:07:55:60:91:69:4c:
                    c4:d8:ba:2e:1c:4c:6f:5e:e1:dd:cd:e9:0c:3f:45:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:4F:C1:C0:B8:D4:22:47:8A:61:28:FC:10:80:B5:90:EC:FE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.19.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:20:c1:1a:b0:6f:dd:38:97:e3:b5:b7:93:31:6e:52:85:7b:
         66:9a:97:cf:f1:95:bc:f1:6b:8e:ef:ff:63:e6:63:de:ac:7a:
         12:56:36:37:79:3f:4f:f4:39:8c:14:87:06:d4:bb:2c:d9:b9:
         c0:2c:44:2b:bf:b0:6a:da:f5:d9:26:cf:25:23:f8:72:42:26:
         af:6c:82:f7:d9:37:ec:80:c9:28:4b:e0:44:a7:ac:ca:91:2f:
         65:3e:60:9a:b0:d1:38:54:b4:d0:45:47:d9:ce:bf:ad:fc:d8:
         ec:7f:29:d0:2b:c6:c3:5d:59:59:3a:30:59:17:93:7c:ff:2a:
         5c:da:fb:eb:c2:c6:ce:0d:81:33:ca:6d:ab:37:4b:14:36:72:
         24:e2:b6:9a:82:c3:93:9d:85:cd:12:3f:95:08:61:66:bf:5f:
         8f:6d:d2:22:14:51:45:78:35:1a:54:b8:20:7c:89:8f:c3:9b:
         c4:7f:aa:f4:57:da:b7:b1:2c:d7:d1:ee:cd:f0:af:a4:81:56:
         d6:cd:78:d6:6f:79:16:b7:63:57:13:3c:97:77:ff:17:be:f6:
         75:b9:e2:71:7c:f1:4d:64:08:bf:f4:fc:fc:f0:be:44:18:dc:
         f5:88:70:63:3e:c9:bc:a2:e8:c3:f4:2c:7c:1f:49:13:39:13:
         cc:dd:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:56:45 2024 by rpki-client on console-fra.rpki-client.org