Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ab2484-4499-30a1-be12-6057ab132579.roa
File:                     b4ab2484-4499-30a1-be12-6057ab132579.roa (raw, json)
Hash identifier:          Kh40qGGCYBt3GycheP1E69QBVQfij2EzB+ghuKfEyaw=
Subject key identifier:   78:EC:0F:AF:A7:08:E8:9F:8C:A1:76:41:4F:4D:3B:C1:C5:92:CF:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C83EA9BD68F2FE698AC780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ab2484-4499-30a1-be12-6057ab132579.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.30.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:3e:a9:bd:68:f2:fe:69:8a:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=13ccaa65-bb1c-47c6-8d47-63bea71638f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:8b:e3:f6:21:00:9f:25:5f:a8:8a:7a:64:
                    7a:92:ea:55:b6:65:70:a5:10:a1:13:31:5b:1f:53:
                    2c:63:d3:6a:90:9e:be:33:90:39:9d:86:e1:e3:a2:
                    69:e1:6d:69:a0:84:53:a3:fd:03:9d:fe:2f:87:ec:
                    29:4d:99:a0:c5:54:7f:d7:96:0d:95:44:52:cd:aa:
                    c3:ab:be:12:40:f0:9b:0c:c1:01:46:50:3f:99:f5:
                    81:8a:cb:17:59:92:52:a0:09:d6:58:a5:ac:e1:e9:
                    73:8a:dd:64:e9:3b:5d:58:bb:0c:bd:68:1c:b7:95:
                    42:90:cb:ba:e2:b9:9b:df:93:95:7a:90:ba:79:5c:
                    6a:ed:d2:d0:f5:cc:e0:e7:6d:1d:ac:94:65:64:b2:
                    11:3e:26:17:eb:4d:2c:19:46:fd:96:3e:10:23:e9:
                    ff:96:7b:76:e5:82:02:0f:11:32:e6:ad:ed:cb:9f:
                    2b:92:01:38:44:96:33:e1:0e:f3:cc:aa:ae:96:57:
                    f7:7e:5b:f1:24:19:a9:3a:ca:22:d7:d6:e2:44:13:
                    a2:d9:4a:65:de:30:58:ed:09:c2:54:a1:c7:b1:a6:
                    75:ca:31:d1:f4:ef:6b:0a:0a:d5:d2:bb:da:a3:49:
                    28:35:74:64:10:db:29:eb:55:82:e8:e9:b8:2d:62:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:0F:AF:A7:08:E8:9F:8C:A1:76:41:4F:4D:3B:C1:C5:92:CF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ab2484-4499-30a1-be12-6057ab132579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:70:f1:78:e0:23:f3:cb:f3:fe:2b:e2:af:12:22:55:20:f3:
         8f:72:51:a4:f6:a8:9d:4c:19:19:f0:ff:18:d9:60:79:82:b6:
         d2:e0:9a:7a:46:5b:e3:4f:ee:dd:b4:e8:e1:76:90:b4:d9:fb:
         72:bc:ae:69:6f:7b:f4:99:43:41:d0:b5:95:11:37:c8:03:36:
         a3:2b:a9:10:ae:67:b7:e3:8c:bf:cb:d8:4a:0f:31:eb:43:75:
         90:ee:d2:79:f1:7b:28:bb:77:56:a7:b6:cc:ea:84:db:3b:c1:
         d0:4b:81:49:5b:0b:6c:bb:21:e3:8c:2c:44:71:cb:60:8b:91:
         3d:c8:92:fb:d9:64:2b:39:1c:32:e7:03:47:01:ca:b5:9f:4f:
         7f:eb:7c:0e:a2:03:a5:33:f4:5b:73:98:48:29:c0:53:87:8f:
         76:c9:fb:18:0d:1f:69:46:12:37:5a:12:df:c3:7b:19:6d:09:
         cc:99:be:56:87:f9:a8:83:d0:ab:51:31:02:4c:a2:8c:2f:eb:
         44:9b:3e:d3:80:50:be:72:2c:5d:2c:27:82:46:26:0c:93:56:
         0e:9e:6e:d9:c9:26:60:31:a8:08:af:bf:47:32:c7:19:b6:cd:
         8d:43:cd:8e:87:13:59:50:d2:bf:7c:59:89:6d:dc:7e:21:b7:
         d1:13:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:10:50 2024 by rpki-client on console-ams.rpki-client.org