Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7c5b7d3-c520-3de2-92b5-d2735dc43de8.roa
File:                     b7c5b7d3-c520-3de2-92b5-d2735dc43de8.roa (raw, json)
Hash identifier:          7SGYJWkoZyI3gz2f8pWQ7Z1CauSyFxAS/+FPGNKRJbk=
Subject key identifier:   4D:A4:B5:0A:61:F4:A3:6F:7B:B4:AA:AB:57:CC:D3:31:82:D6:6B:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF75C246453C24D7B1F9A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7c5b7d3-c520-3de2-92b5-d2735dc43de8.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        96.74.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:5c:24:64:53:c2:4d:7b:1f:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=aec4b7a2-c11c-4ff9-8196-658f339c159d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:c4:15:46:54:d8:03:ba:a0:8d:5a:54:53:
                    6a:02:d5:a0:dc:f2:c9:4e:10:a7:e2:a4:e8:ca:71:
                    3b:23:49:e3:32:d2:c0:c7:f5:89:de:93:80:8e:55:
                    f1:d7:94:7e:ee:0e:b2:1a:95:2f:55:9a:0c:ef:87:
                    da:bb:38:2f:d6:43:67:e6:11:3a:51:19:84:cb:01:
                    09:a1:8d:d4:c5:46:41:49:35:97:8f:1b:41:82:da:
                    26:17:56:0f:91:a5:31:ef:28:2b:18:a5:34:04:0f:
                    ab:8f:f9:35:b7:45:70:b8:b4:b6:08:ec:20:9d:46:
                    f5:3e:f3:8c:9e:55:3f:84:46:11:07:cc:7f:9b:fc:
                    10:a0:f6:26:06:af:03:ef:11:8b:03:64:b2:c7:6e:
                    32:f8:ee:0e:0c:e4:e6:13:24:0b:53:4b:8e:c5:8a:
                    55:52:c5:b7:cc:d0:74:bd:c5:99:43:63:2e:4c:92:
                    85:9a:01:67:f4:fd:5a:86:55:a0:89:b8:05:fb:74:
                    12:d9:fb:25:04:25:5b:14:e0:2f:bf:79:6e:d6:0a:
                    07:8c:42:77:0c:49:27:88:d5:91:69:8b:5a:08:ba:
                    6b:70:a5:90:02:1f:17:16:cf:16:af:b0:59:a0:c2:
                    93:19:6a:0e:1f:2f:76:59:57:b1:63:05:b7:f4:3d:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:B5:0A:61:F4:A3:6F:7B:B4:AA:AB:57:CC:D3:31:82:D6:6B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7c5b7d3-c520-3de2-92b5-d2735dc43de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.74.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:66:00:7b:94:ff:7d:0e:73:ad:0b:82:5d:46:a6:89:7f:
         2d:a8:5d:ba:73:a6:96:f4:96:af:5f:27:0e:1c:91:70:74:f4:
         5b:0d:8a:68:f2:42:ab:3c:52:b3:be:4e:2e:c3:8f:5f:b0:6d:
         fb:71:aa:74:ea:ce:ba:19:42:6c:df:c7:25:df:3a:1e:19:5e:
         d2:97:82:46:ac:d1:89:24:4a:5c:39:12:22:f4:61:3c:f0:f3:
         4f:3b:d7:7b:a6:8f:b7:f5:cc:74:a1:0d:a9:43:20:14:0a:68:
         5b:54:0c:20:65:ea:9a:34:8e:f4:7c:56:51:6f:51:a6:4e:3d:
         0f:91:8b:c7:d9:33:1b:a4:c0:4e:e4:74:7c:77:e6:a9:0c:0d:
         7d:be:d9:3a:15:65:d4:d4:cb:56:ae:85:2c:75:a8:91:27:b7:
         10:d3:c0:a2:27:4c:1b:c9:11:fe:36:91:93:e8:b5:50:70:3f:
         76:5c:f9:b1:c1:e0:2d:5f:fe:cd:13:aa:ae:97:96:81:d0:bb:
         46:9c:59:f6:45:4f:96:5d:7e:04:1f:e2:c5:aa:6e:04:50:9c:
         9f:4a:f4:3d:59:49:f2:22:76:82:1c:1d:6b:9e:15:53:a7:5a:
         bb:fb:94:72:0b:d2:a7:7c:27:4c:88:5d:d1:dd:0a:9b:2f:33:
         db:59:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:15:50 2024 by rpki-client on console-ams.rpki-client.org