Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d05330-4345-3825-ba9f-dae5ef2ad54e.roa
File:                     42d05330-4345-3825-ba9f-dae5ef2ad54e.roa (raw, json)
Hash identifier:          zAund0Nx5andw2mA3v/p+s/uEL450GcqkxIu607NY30=
Subject key identifier:   23:43:B8:95:96:91:E3:C3:FA:2D:99:90:A1:03:2D:CA:64:8E:69:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5FD2C5E5B663D723BFA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d05330-4345-3825-ba9f-dae5ef2ad54e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.145.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:fd:2c:5e:5b:66:3d:72:3b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=253871d4-80b9-44f8-94ab-049dc7a0aaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:eb:a8:c7:a2:a9:4c:3c:76:1c:a4:2c:00:
                    75:dd:2a:40:26:cf:b0:b5:c4:f4:e2:1c:37:60:93:
                    1b:12:ae:3e:81:e3:7f:0f:f9:a6:97:1b:fc:66:1a:
                    e2:3a:b4:e0:a0:0d:01:89:79:1a:34:c2:2d:a8:c6:
                    d0:d7:be:8c:f8:3f:89:77:5c:db:a5:a8:70:fc:94:
                    00:a1:10:5e:55:f1:3a:6f:f8:cf:e0:71:08:f9:7c:
                    54:76:db:8e:6a:45:74:71:d9:b4:61:60:52:0d:7b:
                    ed:da:fc:91:c5:4f:8d:0b:af:23:ee:4c:4b:b8:34:
                    06:2a:ff:9f:aa:2a:f0:c7:33:13:b4:c4:93:8e:bc:
                    ec:06:8d:da:8d:38:bc:19:37:d4:1e:af:e9:18:fe:
                    8e:79:a3:3e:b0:81:d1:ab:11:67:58:22:d1:89:bc:
                    41:13:cc:d4:8e:b7:b4:e9:d9:3e:32:8a:3c:bb:61:
                    64:69:78:8a:d0:9b:a4:f4:fb:2e:99:74:8f:b5:16:
                    6e:8a:31:9f:1c:59:65:5e:e2:a1:ae:82:23:3a:35:
                    cd:5b:2d:8e:62:54:b8:01:6b:bd:38:39:15:05:65:
                    a9:40:fa:8f:ef:1a:1a:56:e2:28:b5:4d:97:fc:dd:
                    b6:30:bd:1c:a9:37:f3:73:6f:a0:ba:03:0a:a6:1e:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:B8:95:96:91:E3:C3:FA:2D:99:90:A1:03:2D:CA:64:8E:69:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d05330-4345-3825-ba9f-dae5ef2ad54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:3c:8e:f1:6f:5b:e4:f2:b7:0f:b1:0d:12:53:53:5a:9e:
         71:0b:70:42:f6:90:ad:4d:03:93:ea:64:b9:fb:a2:5f:62:7f:
         ec:d5:9f:1c:a5:1b:3e:8c:55:f3:21:dc:c4:7e:ca:07:da:6b:
         a8:bb:65:b9:93:1f:1f:1f:f6:9e:aa:a0:47:7a:5e:2a:ff:9a:
         09:ba:66:a0:bc:66:b8:e9:b2:cd:9b:dc:87:c4:4d:6d:79:d0:
         e8:14:fb:ad:2e:14:c9:db:91:e9:9c:e6:a9:27:33:29:de:fd:
         65:af:c4:98:58:8f:11:8a:9b:38:71:f5:5b:23:88:fb:07:01:
         3e:49:4d:df:12:60:77:80:37:de:95:76:eb:71:41:c7:4b:e5:
         21:33:90:5c:30:2f:1b:7d:5a:ae:19:ba:1b:2b:aa:4f:d1:95:
         5a:e2:ed:ac:ad:aa:97:fb:13:3b:a7:36:dd:b5:d4:2d:4e:e6:
         7f:25:05:53:67:5e:b8:25:2b:9d:19:6d:3e:4d:01:b2:24:80:
         fa:ce:3d:bc:1b:d2:01:ad:a9:a1:92:f1:e1:a3:dc:05:84:ca:
         92:54:79:de:72:ea:cf:a1:82:3e:06:1c:48:b6:b7:f2:77:20:
         33:42:fb:a7:6e:b4:84:74:18:20:61:ea:21:eb:6f:82:7b:1f:
         da:2e:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:19:04 2024 by rpki-client on console-ams.rpki-client.org