Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c19bc1cb-c0a7-3975-8680-14d7e89dccc1.roa
File:                     c19bc1cb-c0a7-3975-8680-14d7e89dccc1.roa (raw, json)
Hash identifier:          NRLDAY0oKZk7EP8FLNbDPO/hWbdOb1zmYlNC4od7dts=
Subject key identifier:   A9:8E:8A:D2:BD:8D:14:02:E4:FD:AE:8E:73:75:59:80:A0:C7:11:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D7FFADC324C6D96431A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c19bc1cb-c0a7-3975-8680-14d7e89dccc1.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        76.133.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:7f:fa:dc:32:4c:6d:96:43:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0d7ce505-4823-4e29-ad8e-b364469f2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:47:60:9b:af:c2:85:32:c7:e5:d8:45:3e:
                    c3:0d:43:e8:da:34:e2:ed:47:ad:52:86:49:bd:e8:
                    26:a4:58:e2:d7:8d:b7:bc:ea:b2:d3:86:fe:e6:6a:
                    23:ab:4f:4c:6b:66:ed:aa:2f:a0:e3:76:42:ae:6b:
                    8f:e0:09:3a:ff:ab:73:ec:1d:66:a8:3d:30:ee:e5:
                    b4:e0:5c:d1:67:e9:33:cc:75:84:15:f5:b0:a9:de:
                    d7:8c:02:51:bf:fe:67:95:cb:27:8b:74:3e:8a:1f:
                    d5:67:52:0c:9b:65:df:6f:40:21:94:24:fa:cc:73:
                    6a:28:67:82:1d:cd:3b:11:ab:a0:2f:66:15:5b:48:
                    e5:40:6c:5c:4d:22:2f:c6:8f:dc:e9:a3:ac:49:14:
                    7b:4e:be:47:5f:0c:1a:35:92:86:1f:62:20:30:5b:
                    10:78:07:f7:5f:8f:23:b1:4d:2e:b1:0a:f5:35:b8:
                    43:89:ad:41:c4:9f:f2:00:20:37:c7:f4:d7:a3:9f:
                    b7:73:e0:ea:49:fb:8c:2a:f4:eb:98:87:d8:2e:69:
                    f4:ea:2f:7d:f9:55:59:1a:d2:66:a0:bb:9c:85:9e:
                    55:96:ee:9b:93:a8:73:dc:4a:e8:1f:da:f2:2e:b5:
                    f8:5a:c1:89:88:67:a5:5d:d5:37:c7:ac:e7:85:8d:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:8A:D2:BD:8D:14:02:E4:FD:AE:8E:73:75:59:80:A0:C7:11:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c19bc1cb-c0a7-3975-8680-14d7e89dccc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:05:07:7a:60:c4:ae:43:fd:c3:72:c7:93:6c:68:b4:48:
         5b:c1:4b:6b:fb:86:8c:c7:73:bb:89:67:df:0b:5a:91:a9:22:
         7f:a5:31:d0:a9:92:d7:f9:dc:a7:c3:be:af:70:fb:48:94:4b:
         88:5f:71:56:1d:d3:a9:93:a5:ff:07:ea:2f:d4:71:67:e0:be:
         ef:b5:71:eb:69:b9:73:98:e4:ac:83:19:89:26:4a:f7:c1:f7:
         f2:5c:fa:e5:a9:47:00:88:25:9b:e3:ba:26:1b:c5:e1:6f:2f:
         de:5f:89:69:53:81:e0:d7:5d:28:74:a5:e5:5e:a5:d0:de:78:
         b9:b2:c9:61:64:4c:29:ff:5c:cd:3f:27:08:85:cd:e0:e9:42:
         d7:55:63:83:f3:41:f9:bd:5b:17:04:ff:66:85:4d:8d:55:18:
         af:d5:18:7a:a5:11:96:e5:af:a9:a5:f7:ef:c0:e7:45:c7:31:
         ee:5b:df:1b:73:eb:99:df:bf:57:91:ac:72:81:60:06:74:bd:
         7f:d7:e1:27:09:a2:9b:9b:e0:62:2e:cd:6f:a5:c1:39:fa:4e:
         1d:6b:3f:9e:f9:b7:ea:a7:66:8c:06:f8:b2:bb:9f:3b:44:23:
         d2:54:b4:de:4b:3b:a7:3a:1c:6c:27:c3:3a:e0:a1:38:4e:ba:
         af:95:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:11 2024 by rpki-client on console-ams.rpki-client.org