Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa
File:                     a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa (raw, json)
Hash identifier:          7f74oA25GgLaa9Nu2qBoZ3cNXRb8aLAZFFpGdgI594U=
Subject key identifier:   8F:17:FF:C8:AD:FA:67:1A:C7:C7:09:C6:43:88:96:B6:43:90:A9:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CA0D20DE699BC411B40C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        76.16.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:a0:d2:0d:e6:99:bc:41:1b:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d273506b-d1ea-44eb-9b94-17f370d5ad40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:44:3d:67:d8:da:19:8f:93:cb:9f:97:54:
                    f1:cd:0f:79:8a:f3:bd:c1:3e:e1:ac:9f:1b:82:ab:
                    22:eb:30:aa:89:d1:8c:1b:03:0d:bb:95:4f:bb:03:
                    31:b3:ad:6d:de:19:b2:22:bb:64:13:6a:39:66:82:
                    f3:8b:2f:ce:30:50:c6:11:9c:33:c7:7a:0c:ff:e6:
                    62:1c:0a:93:30:84:16:12:f8:af:31:03:8e:a6:0a:
                    fa:f7:e6:7c:8f:1e:8f:8b:1b:a0:9f:bf:99:f0:21:
                    34:eb:e5:dd:c3:98:96:ff:d5:ba:f3:23:22:9b:49:
                    3b:d4:e4:f1:8c:6e:de:a7:87:ae:3b:50:7f:4d:48:
                    e9:23:17:2c:d3:d5:41:3b:fe:7b:07:ac:50:2d:49:
                    8b:b3:ca:53:2a:fa:a0:91:be:0c:62:00:e2:58:34:
                    75:72:56:c1:58:a3:52:e8:45:ba:9d:e6:21:13:34:
                    a8:ab:54:3e:f4:39:fb:81:c8:9f:9e:06:18:7e:be:
                    d7:3e:9a:62:02:a7:09:da:17:bb:24:51:ea:5f:a2:
                    ed:90:7a:24:98:00:29:b9:a9:f4:5d:6b:28:38:a7:
                    b8:c0:97:13:2a:b6:88:08:5b:3b:d4:4d:41:52:ad:
                    1d:43:b5:a8:1c:3e:9f:3e:1f:de:32:ea:c9:9f:b2:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:FF:C8:AD:FA:67:1A:C7:C7:09:C6:43:88:96:B6:43:90:A9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.16.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:af:1d:c0:1d:f4:34:5d:3e:3b:2b:5e:79:d6:a9:a0:7e:6f:
         f3:2d:f9:23:4f:cc:c7:4a:39:58:97:24:f0:8a:fd:ae:31:6a:
         09:76:2e:a3:cc:f6:92:87:ff:75:39:b9:c3:75:72:dc:5e:72:
         52:07:46:a8:03:10:bb:f3:fa:06:54:f3:3d:32:df:dc:14:e0:
         72:cd:9b:ce:9d:df:30:ed:09:49:6e:5f:94:36:0c:5b:b1:91:
         f6:7e:af:3f:01:81:3f:c8:d0:c9:31:14:c5:6a:15:f4:f1:b5:
         e8:ac:9f:c1:fb:7a:94:7a:43:84:0a:dc:02:33:f3:24:19:02:
         5f:63:ab:da:04:98:56:43:ff:b1:f6:f0:34:6b:e2:9a:0f:b0:
         3b:31:e6:1a:9e:05:26:dc:6f:46:b0:1e:dd:34:f1:93:2d:a1:
         e2:b8:b9:5c:bf:8c:c4:b6:89:3f:52:d7:8f:77:30:db:d3:c9:
         7d:7b:e6:64:50:95:dc:a2:5d:95:fa:6c:d2:4f:69:3b:04:65:
         43:44:14:c2:2f:8f:99:91:2e:b7:81:fc:9e:77:35:a5:e0:41:
         88:8c:46:85:7d:f5:61:9b:44:bf:7b:ed:d9:0c:67:59:1d:3b:
         ea:91:68:89:61:03:2d:3b:5a:9c:d3:04:04:cc:d3:ca:d3:5d:
         3a:b4:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:25:09 2024 by rpki-client on console-fra.rpki-client.org