Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821e8796-25d5-31e4-a245-08dfc6578baa.roa
File:                     821e8796-25d5-31e4-a245-08dfc6578baa.roa (raw, json)
Hash identifier:          OABAyB9XoWUWdeUQvtNTcYomptvG/08sjMnYD7PBQI8=
Subject key identifier:   64:E1:EE:EE:B6:83:8A:0E:FC:31:2F:BC:FB:22:2D:F8:01:E0:7A:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EF7FC81E92CDE3BA9F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821e8796-25d5-31e4-a245-08dfc6578baa.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        76.124.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:f7:fc:81:e9:2c:de:3b:a9:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=20878b09-d1e4-4e28-a0ef-ce2b07f9031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:1b:1b:0a:1a:a0:d3:54:dc:92:6b:23:29:
                    8a:2e:d6:99:4a:56:ba:49:cc:93:0f:b7:cf:61:ac:
                    f3:6f:ac:85:f7:55:df:75:4c:b9:67:ab:dd:8a:87:
                    3d:37:1a:49:17:0f:08:c8:90:f8:1d:22:bc:ef:bf:
                    9e:c9:c5:ac:cf:cd:af:4a:29:96:5c:70:b1:44:22:
                    64:ba:93:ba:6d:15:ea:dc:33:ca:bb:32:5c:ab:ce:
                    34:01:6f:34:f9:1c:e3:32:41:5e:ba:11:9d:78:c7:
                    03:34:f3:53:0f:75:39:81:74:4a:f1:a0:74:d0:e9:
                    f8:a5:5a:a8:72:51:57:e6:fc:57:11:54:14:40:8c:
                    b8:29:37:5e:01:08:6b:10:5f:2e:24:ac:2d:89:6d:
                    30:4b:1c:4a:36:40:60:c1:0f:e2:35:c7:ae:b3:c8:
                    49:d1:2b:3c:5c:a7:0c:54:84:c0:28:bd:5d:37:a3:
                    7e:84:04:70:a8:8d:93:35:da:cc:69:c0:2e:7a:37:
                    91:ef:5b:c4:cf:5e:21:33:3b:82:4f:4a:c4:3d:08:
                    a9:cb:6d:81:07:ad:de:78:ef:53:9f:cb:3a:64:8f:
                    49:e5:7e:f2:31:81:f7:5e:99:a5:59:08:77:a7:eb:
                    fb:8d:7e:c0:4d:c7:fc:f0:90:ba:d0:90:67:bc:82:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:EE:EE:B6:83:8A:0E:FC:31:2F:BC:FB:22:2D:F8:01:E0:7A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821e8796-25d5-31e4-a245-08dfc6578baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:91:6a:a2:05:02:14:c6:ce:4e:c2:06:ed:ca:d3:d4:4a:
         0c:94:00:e6:9e:99:00:44:b0:72:6b:97:62:a0:d1:e3:ac:c0:
         4a:5f:b4:b6:f4:00:c5:89:db:dc:dc:d9:90:f5:13:32:c2:96:
         5c:ef:8b:cf:33:1f:59:a6:46:18:42:d5:cb:16:a8:7c:29:e1:
         c7:09:60:49:09:71:b9:bd:1d:51:a2:86:0d:4a:8d:94:fd:89:
         d6:12:fb:26:bd:3d:68:4e:72:42:ef:17:85:5f:b2:c1:57:6d:
         00:c7:32:9f:a9:7c:1a:94:18:cb:e7:df:77:2d:be:34:ca:68:
         7b:00:7e:07:14:8f:78:c3:86:5e:cf:f6:9b:99:74:93:2b:97:
         a4:87:3c:95:b7:74:ab:1d:bd:f7:59:d0:86:92:58:2e:6a:20:
         6c:b0:fa:c6:08:d9:34:ee:bf:80:fb:19:66:a9:e8:7c:b6:71:
         2c:26:19:ca:0d:fb:dc:65:07:a1:ec:88:76:b7:b0:93:3d:d7:
         7c:6f:a3:40:2c:21:e9:9f:8d:7d:4a:6b:27:27:f8:1a:8e:d7:
         c1:d6:85:b3:6e:72:60:c7:a6:01:98:8f:30:b5:e3:78:18:47:
         bb:9f:d7:ea:5c:29:e8:36:69:ee:11:ab:1a:1e:cd:ef:3d:c2:
         32:9f:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:59:40 2024 by rpki-client on console-ams.rpki-client.org