Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426db3ff-8774-3155-a2ce-2066fad1b380.roa
File:                     426db3ff-8774-3155-a2ce-2066fad1b380.roa (raw, json)
Hash identifier:          E6ACdNWA4+voUIaqSv7V7OmC9dNBCUc5V4qLaYeOwWo=
Subject key identifier:   15:38:20:FA:2B:05:6A:98:6C:BB:83:68:FB:BC:0E:FA:3B:C7:E1:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8420B7D470E23E4481180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426db3ff-8774-3155-a2ce-2066fad1b380.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.31.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:42:0b:7d:47:0e:23:e4:48:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=8bde2b44-dd50-46d5-91cd-bbb5df77fc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:1a:c4:2b:08:8d:e2:0b:bc:97:00:77:02:
                    61:a6:e0:8b:be:15:a3:91:6c:0e:aa:ab:8a:2f:96:
                    44:29:fc:e4:54:de:1c:c3:23:6f:ca:5c:be:13:79:
                    75:58:3b:7d:2a:bd:cd:3e:b4:8b:f8:1c:df:0b:92:
                    c2:26:28:8c:4e:d1:f8:86:3f:d0:00:3a:f6:45:d4:
                    ca:89:ac:e1:af:c9:63:c6:95:65:66:ae:f2:5b:f3:
                    3e:64:94:de:d2:d4:81:10:75:89:2b:ca:12:de:e5:
                    02:f9:69:f6:73:ed:ca:bb:dc:1e:50:51:a9:90:1a:
                    26:4c:24:8c:f3:87:a1:21:a2:3f:a9:6e:34:78:93:
                    29:63:cb:fd:2d:17:66:68:be:48:ac:6a:e0:f7:9a:
                    7c:01:cd:11:09:fa:16:4f:69:b7:88:ee:2e:55:9d:
                    33:8b:75:a2:dc:88:69:b7:f9:f7:f2:67:a9:b8:e7:
                    2b:b7:42:07:a1:0d:c9:40:2e:67:e7:83:44:f8:14:
                    fe:cc:86:d7:6e:5e:b7:e0:fe:22:c7:60:39:67:73:
                    51:70:30:e9:51:d1:98:10:62:46:be:1d:83:cd:2f:
                    10:92:43:76:f4:13:bc:54:19:b0:76:0d:48:e1:7c:
                    1a:6b:2b:ed:3c:e3:d4:e1:83:62:ce:1d:84:79:95:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:38:20:FA:2B:05:6A:98:6C:BB:83:68:FB:BC:0E:FA:3B:C7:E1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426db3ff-8774-3155-a2ce-2066fad1b380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:3c:ff:67:b5:e7:97:d7:03:17:fc:f5:8f:1b:bc:58:27:
         65:0b:e6:2c:2e:f1:51:8d:0e:76:dd:72:85:bd:6d:11:97:c5:
         0e:5b:e0:67:4e:65:ca:4e:fc:73:3c:ff:c0:f9:e1:7c:c8:b4:
         43:73:1a:94:51:fd:8a:4d:3a:83:0b:d0:15:c3:dd:b8:18:05:
         38:c6:6a:06:27:2a:3c:d0:70:ab:50:b5:83:ba:a3:41:96:f8:
         c0:e4:b5:2b:4a:27:f5:34:60:36:91:91:a8:4d:ec:27:95:47:
         e2:3f:0a:1b:b4:a3:9d:58:ee:c9:91:8b:8c:28:1e:64:fe:97:
         c1:6b:c6:8c:71:b5:d2:12:f9:76:6d:f9:b9:82:a9:b2:44:10:
         ec:9c:45:a8:2d:11:00:9e:2c:9c:41:e9:8d:e2:98:c5:2c:67:
         8f:34:af:f2:69:3a:82:f0:42:0f:b1:52:d0:4b:5e:66:7a:40:
         8a:6b:99:55:04:9c:54:98:33:39:38:65:1c:a3:cc:67:95:80:
         08:d2:c5:ff:0f:08:69:e2:d6:35:14:b1:19:78:61:70:5c:dc:
         f4:ac:bc:59:de:37:0e:c0:ce:05:02:7a:62:a1:37:39:14:b5:
         14:00:34:06:08:9d:ca:41:5f:d6:a4:a5:a4:50:f7:b7:27:db:
         bb:97:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:00:34 2024 by rpki-client on console-ams.rpki-client.org