Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936f5f20-e06c-34bb-ac02-905c3315546c.roa
File:                     936f5f20-e06c-34bb-ac02-905c3315546c.roa (raw, json)
Hash identifier:          /nPuJFJ7U7Pqj86vFXfWu4TuKsehZMrmQrpPDkIJ4uA=
Subject key identifier:   8E:9E:4E:DF:5D:29:81:DA:53:8A:F1:CC:3D:99:71:BE:C6:E5:40:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C83A0B690D8753329047C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936f5f20-e06c-34bb-ac02-905c3315546c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.143.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:3a:0b:69:0d:87:53:32:90:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5d6b55d4-3ca3-49c3-8872-15f3a49df919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:3b:10:e0:1c:dd:41:c5:bf:36:48:0f:17:
                    e7:2b:cb:ee:56:96:57:5a:6e:67:d9:85:57:ec:5e:
                    84:5a:ae:42:06:a7:3b:3f:00:a5:dc:7e:ad:d5:4a:
                    de:a0:5c:43:87:8c:2a:b4:a9:c3:8b:29:5a:2c:3d:
                    42:33:9b:04:64:69:ca:b1:45:18:d2:50:4c:cc:12:
                    a6:fa:c6:1b:52:b0:ba:c3:57:4a:4a:b9:4e:d9:8e:
                    94:e5:60:90:b5:23:c1:c7:dc:b9:cf:10:27:cc:f1:
                    90:09:bc:a5:73:b4:72:fc:2a:c1:e1:69:24:75:46:
                    63:d2:b3:34:f3:61:04:18:e4:d0:2f:81:b9:a9:b0:
                    98:b0:6a:1d:96:6f:96:69:55:a4:b2:5b:5a:ac:34:
                    23:ca:9e:dd:3b:b1:e4:cb:d1:ee:70:7d:e5:56:e7:
                    2d:c6:80:f0:b2:30:2e:34:08:2e:4a:98:3b:86:4c:
                    ee:b1:65:57:94:51:21:56:26:66:da:d8:04:90:a3:
                    b9:13:37:29:b9:78:b5:89:b4:86:d5:ff:35:ab:ed:
                    10:77:97:e4:8a:cc:90:69:6b:41:d3:48:13:89:48:
                    94:ae:53:de:94:6e:6b:d7:67:53:64:9f:bb:07:57:
                    b4:27:5a:08:19:2d:01:c9:f4:52:02:e9:13:54:d0:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:4E:DF:5D:29:81:DA:53:8A:F1:CC:3D:99:71:BE:C6:E5:40:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936f5f20-e06c-34bb-ac02-905c3315546c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:84:2a:c0:01:52:a8:51:10:f9:3e:29:40:ca:29:2d:72:
         bb:0e:3b:43:bf:bd:32:32:9c:d7:91:3d:66:e4:26:bc:ef:34:
         11:8a:f3:c2:87:4f:15:04:47:e6:07:43:0d:13:15:5b:37:f5:
         18:72:10:37:b5:ca:5b:6c:9f:bb:1b:01:26:ad:c9:a8:b4:61:
         1e:c5:db:a8:1d:76:34:d7:fc:f3:0c:e5:80:3c:4a:60:f0:ea:
         d4:80:01:b1:9c:ff:a9:a2:1b:ce:76:1f:21:4c:5c:4c:f5:44:
         9f:2d:6e:51:26:70:a8:3a:1b:1c:c5:74:e0:65:26:22:30:d9:
         70:c5:2e:cf:ec:25:b5:71:a8:7d:69:cf:a6:63:8c:73:0e:31:
         92:39:a1:9b:67:fc:4b:ab:3a:c7:f8:b4:c9:5c:69:70:f8:f1:
         a9:52:26:a2:f6:85:77:7a:f2:43:07:76:fd:78:29:c9:de:c8:
         f9:6d:99:ca:20:db:be:ed:4e:7c:eb:a3:55:79:3e:f2:93:b1:
         b3:c0:dd:7b:a8:66:ce:33:d9:83:ca:2c:11:0c:49:3f:66:2e:
         08:c6:af:98:f1:0b:23:91:b7:03:5b:60:e2:82:dd:de:98:ce:
         d5:23:37:23:c2:f3:93:eb:f2:62:b9:86:c2:fb:dd:30:d9:f0:
         0f:66:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:07:45 2024 by rpki-client on console-ams.rpki-client.org