Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760e058b-f362-3d84-83f2-37fe7a3969df.roa
File:                     760e058b-f362-3d84-83f2-37fe7a3969df.roa (raw, json)
Hash identifier:          LjBCuZEf05YrbxyNkc+BIdH4I227yi0cTCOKtPa8hnc=
Subject key identifier:   12:CC:83:D9:F7:7B:E5:E3:8F:CF:25:5A:FF:A3:9E:5C:4C:22:04:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C83DAAF3ACDC445B55C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760e058b-f362-3d84-83f2-37fe7a3969df.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.30.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:3d:aa:f3:ac:dc:44:5b:55:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f9a0bc3d-35b9-4ec4-915d-c0f8d667ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:e3:ec:9e:2e:9d:e9:bc:25:a3:b6:c1:c4:
                    9d:16:b4:32:8d:07:ab:b1:8a:9e:17:44:b6:6a:d7:
                    f4:61:5a:d4:b4:91:f4:b7:e0:52:ae:95:17:d3:ca:
                    3c:15:fb:95:b9:35:d4:9d:ff:50:9b:de:ab:7d:32:
                    f5:cc:01:d7:d3:61:a0:df:74:02:46:21:93:67:b6:
                    52:47:1b:a4:65:1d:d4:e5:74:93:79:cf:4d:8a:c5:
                    0d:7c:bc:0d:72:74:89:96:dc:f0:da:e5:39:77:6d:
                    18:46:d3:e2:72:af:e9:6d:aa:7a:12:c9:f9:d3:a9:
                    cd:0d:32:8e:7d:5d:91:41:b4:21:db:22:ff:65:f3:
                    11:81:51:3c:0a:b8:7c:bb:ec:3e:d7:49:82:86:83:
                    94:ff:bc:48:23:23:fc:f6:41:fd:4c:ea:a0:0f:6c:
                    e7:c8:f6:1a:6d:51:3f:b1:dd:2c:20:0b:f3:e7:89:
                    79:a2:ab:24:aa:0c:3e:d6:80:6f:6a:d1:30:a4:c9:
                    bd:f1:88:53:f0:f8:b5:e5:08:82:09:5b:cf:3f:82:
                    58:ee:25:fc:89:ea:43:8b:d1:09:d2:00:70:56:9c:
                    b1:be:ab:40:fc:82:85:cc:a3:8d:d9:c6:c5:93:06:
                    a6:af:3d:53:96:ba:c5:a0:fd:25:3e:c7:76:f9:71:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:83:D9:F7:7B:E5:E3:8F:CF:25:5A:FF:A3:9E:5C:4C:22:04:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760e058b-f362-3d84-83f2-37fe7a3969df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:04:fe:88:78:74:45:dc:e1:7a:46:a3:54:1e:d4:b3:3d:
         26:dd:9f:01:18:d7:cc:6e:30:0a:e9:67:d4:95:d4:61:b5:6a:
         a2:de:7c:68:02:f8:81:4e:d1:af:d9:6d:23:84:dd:fe:5f:4c:
         c9:bf:f4:b2:68:66:0e:aa:df:59:d2:56:dd:85:b4:0d:a1:0f:
         09:e7:9c:33:52:c1:cf:5e:a3:fc:69:32:b1:f6:28:16:5f:de:
         4e:2e:bc:4b:5f:57:54:bb:e2:3f:86:a8:8d:76:d9:44:6c:b0:
         a6:53:ce:bd:62:f4:73:c5:68:a6:89:ea:fa:bb:5b:c1:6c:a5:
         12:a2:fb:3a:d6:6e:25:b7:42:8f:bf:8e:6e:2d:09:52:22:9d:
         59:24:d4:bb:97:a1:65:9d:59:8b:f8:45:c7:55:d2:72:82:b6:
         46:af:03:ba:3a:b6:c3:4a:a2:93:62:85:9f:79:bb:32:70:5b:
         d8:ac:34:14:d4:7d:89:c2:1c:9a:20:b8:fc:60:42:42:7b:9e:
         eb:6a:98:da:0a:10:af:4e:b8:29:c3:6b:ba:2b:01:6b:c1:83:
         fa:3d:06:71:cc:0d:1a:fd:75:35:56:7f:00:30:75:87:02:e7:
         db:65:62:3d:19:74:59:eb:69:48:3d:c4:28:b4:85:0b:51:44:
         e7:e5:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:38:47 2024 by rpki-client on console-fra.rpki-client.org