Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f6400c8-0dc7-352d-b275-d4f8995e0b13.roa
File:                     6f6400c8-0dc7-352d-b275-d4f8995e0b13.roa (raw, json)
Hash identifier:          rdcxQ6LuICbw/PWGwPkFvhNaEN2gxa5pSo9lPvK5owY=
Subject key identifier:   D8:86:FF:82:8C:B6:AB:B7:A4:44:C0:EB:AA:F9:23:BC:6B:27:D2:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8647821A38FBAB59736E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f6400c8-0dc7-352d-b275-d4f8995e0b13.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33654
IP address blocks:        96.124.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:64:78:21:a3:8f:ba:b5:97:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=7b671e0b-602c-4eeb-8d10-d0b7f76e74c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:9a:a4:ef:ea:58:54:fc:91:70:52:13:21:
                    94:3a:82:7b:a2:be:fe:ae:3c:1c:c3:47:de:92:77:
                    af:99:d1:81:18:df:73:d9:40:4a:db:83:7f:61:3d:
                    85:dd:22:9f:c5:f7:e5:4d:31:ee:3b:b6:9e:b8:58:
                    a3:47:30:b8:8f:9c:1e:8d:6f:de:ef:de:78:61:17:
                    35:3f:a7:c0:69:f5:11:a3:44:97:6f:83:36:15:6d:
                    c4:00:33:e0:3b:87:75:6e:86:3c:db:fa:cf:2f:2e:
                    a0:c7:47:2d:64:4b:be:2c:a6:a1:4d:af:12:ce:58:
                    0b:88:19:3e:e7:bb:1b:4b:40:e9:0a:d1:81:26:f4:
                    17:15:b8:39:13:77:1b:fb:e7:2b:11:85:80:47:f7:
                    d0:da:ce:2f:b6:a3:88:4c:e6:4f:1e:3d:e6:7b:60:
                    f4:60:65:f9:16:17:d7:1d:32:00:90:46:73:80:63:
                    e3:1a:bf:a7:ca:69:f1:51:93:4d:73:30:dc:e6:f6:
                    2c:1e:19:b4:62:56:ff:65:65:82:b8:bd:0b:0a:78:
                    6a:a7:3e:1b:f9:24:01:e7:bc:03:f7:b1:e3:ed:3b:
                    ec:1b:54:1b:3a:85:38:b4:ae:b7:eb:5f:14:f8:55:
                    bc:ee:21:2f:bd:34:54:c7:d2:d5:a3:4c:ea:7e:1a:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:FF:82:8C:B6:AB:B7:A4:44:C0:EB:AA:F9:23:BC:6B:27:D2:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f6400c8-0dc7-352d-b275-d4f8995e0b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:de:9f:c8:b6:57:5c:54:d4:07:9b:dc:7f:c5:e5:d6:81:88:
         c2:d5:b0:d3:af:48:cf:fc:34:42:d5:68:14:67:76:a0:58:e0:
         ed:09:71:66:2b:3e:1b:92:1e:04:0b:45:80:74:92:7c:1d:1e:
         31:98:b1:95:16:f9:26:a0:f1:f9:ea:40:4f:08:0a:f9:19:fb:
         52:57:21:5a:59:ae:18:e4:09:c4:73:03:1f:e0:70:42:a3:3d:
         be:75:db:ae:f3:8a:98:c3:6c:40:4a:af:77:c2:73:a6:a3:fe:
         5c:26:c9:2d:67:42:5e:93:58:4c:59:0d:73:6e:f9:53:e0:cf:
         91:a4:3c:2d:fb:6f:a9:62:c4:54:72:d7:8a:f2:d2:45:b5:ec:
         ff:75:a7:85:45:79:45:a5:15:70:bb:f3:14:7d:da:63:4a:e3:
         5e:95:37:af:97:0f:a8:79:ca:93:69:e6:ec:fb:a7:8f:a2:b6:
         cc:b3:06:f4:22:0d:0b:11:6d:71:25:fe:f3:b7:53:2d:ca:39:
         f3:7a:d6:2f:34:34:f6:25:47:fc:93:6a:83:70:5f:e5:e1:12:
         6b:19:fb:74:83:e7:85:bf:b5:67:5b:8c:17:71:84:1d:f3:1a:
         6e:bf:ec:ff:5a:bc:c7:58:24:96:a4:d9:e4:41:13:f2:e9:58:
         52:28:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:15:47 2024 by rpki-client on console-fra.rpki-client.org