Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa
File:                     7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa (raw, json)
Hash identifier:          wlZVIZ8BuYFDZ59Cdj9/8yjrbNRZziVysCFwZwaLMkA=
Subject key identifier:   5D:4C:49:EA:96:5E:22:5B:BF:41:32:1D:78:BD:AC:24:BC:CA:AB:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E68393D635BB8CDF08540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.129.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:68:39:3d:63:5b:b8:cd:f0:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=32ad9007-8440-4e49-9604-5b7a7f4abda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c9:4c:e2:f0:b5:b1:28:22:0e:27:cd:da:8e:
                    66:b9:20:25:ff:98:89:dc:c6:7e:86:2a:1e:68:3b:
                    28:74:d2:f6:a0:2e:a7:14:87:7b:4f:98:f4:b1:15:
                    19:f1:70:88:02:8a:f1:b6:4b:8f:1f:d3:17:0f:21:
                    82:3a:05:11:9b:32:90:77:32:2d:31:8d:bc:66:4e:
                    43:0d:d7:b8:f9:a0:5d:75:df:04:a4:a0:64:78:77:
                    50:4a:29:14:52:fa:22:49:5d:91:68:f3:c7:b3:21:
                    de:fd:47:4b:93:5c:4a:8e:e2:50:28:d7:5c:41:64:
                    fe:aa:75:79:60:7e:2b:c3:ce:bf:1c:6b:cd:b9:36:
                    6b:ee:ed:42:4b:17:6c:82:ce:8d:33:0a:de:09:c4:
                    e0:83:ea:40:91:a7:45:9c:54:16:c6:5f:c8:ae:99:
                    1c:ea:65:a2:55:8b:53:47:4a:85:ef:30:f9:27:d2:
                    5b:d1:68:c7:7d:e4:00:2d:57:3b:92:f3:5b:90:85:
                    8c:00:26:54:48:7c:44:23:46:57:79:20:74:89:4f:
                    66:53:d7:ba:c0:9d:92:a3:3a:9f:15:88:d7:34:a5:
                    de:6c:69:16:33:80:5c:c4:93:e5:86:b9:97:df:73:
                    e4:52:e6:38:f5:0d:cb:17:99:0f:49:1b:b7:c2:dd:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4C:49:EA:96:5E:22:5B:BF:41:32:1D:78:BD:AC:24:BC:CA:AB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b1:d1:66:0d:ba:86:fd:1d:14:b2:67:7c:3d:34:90:b7:8b:
         48:4f:e3:84:b0:69:66:2e:3a:e7:4e:0e:b3:7e:38:04:5f:3e:
         32:29:ab:96:0a:4e:f2:a7:4d:4a:c9:32:bb:eb:c7:f8:96:f7:
         f3:98:53:df:85:4e:ba:0d:11:46:da:40:4f:f6:64:63:80:f5:
         2c:97:7b:35:49:75:26:11:57:70:8f:3a:6d:60:c6:36:17:b0:
         dc:0b:e3:b1:ce:2b:d6:d1:30:08:1a:df:55:08:ef:71:89:97:
         7f:fe:ac:87:5b:3e:e6:ed:3e:1a:cc:9e:48:ed:16:03:a5:84:
         c2:5b:e2:07:c0:a9:d0:2b:d9:92:5e:40:e6:8d:28:8f:7a:0b:
         26:2a:72:26:5d:36:cf:c0:e2:af:12:5e:36:72:87:d8:48:b8:
         63:14:7d:f0:c5:f2:86:4b:6b:82:5f:ad:68:ff:fa:f5:5e:6f:
         63:70:5d:d6:30:36:c9:7d:fa:f2:5a:d3:89:24:1e:60:27:b8:
         14:8a:23:7f:2a:a0:70:76:dc:e9:5b:71:f7:19:f9:38:e9:f2:
         cf:f7:df:27:e8:51:bf:bc:5e:4e:42:3e:c9:aa:a7:da:07:e0:
         1b:f9:a8:ce:cc:13:55:a5:4b:bc:67:27:af:aa:ed:11:c5:c6:
         6c:94:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:05:35 2024 by rpki-client on console-ams.rpki-client.org