Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38da1d6-774d-3c67-9c1e-077c88cd2743.roa
File:                     c38da1d6-774d-3c67-9c1e-077c88cd2743.roa (raw, json)
Hash identifier:          55s7gkdoMM+AfeCqYRDfH+DxM7AeKTq/kspCyLn/AWY=
Subject key identifier:   2F:7D:11:88:F0:B2:C9:B7:52:CE:84:73:4F:B5:0C:A2:62:A7:CD:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8242A2EA15E144FB03F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38da1d6-774d-3c67-9c1e-077c88cd2743.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        65.96.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:24:2a:2e:a1:5e:14:4f:b0:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b56583dc-4a91-4df9-9e91-9f1c34462aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:90:e4:43:fb:5e:63:23:f4:85:69:1b:26:
                    69:8b:7b:57:34:0a:6a:c5:1b:11:25:0b:2c:9b:9d:
                    12:e5:02:8d:6f:25:92:aa:9b:7b:00:07:79:81:13:
                    a3:1a:fd:5f:8a:12:10:39:3b:20:7b:be:3b:98:1a:
                    00:f0:53:08:d6:f1:4a:e8:52:6c:dc:a5:9b:02:60:
                    3e:65:87:0c:86:6d:67:b9:15:f3:78:85:3f:bd:97:
                    8a:d6:2f:93:d1:a0:98:40:b1:70:8d:c8:be:1d:7b:
                    f9:cf:d9:d6:95:93:7e:dc:a6:50:86:03:da:e0:db:
                    e4:57:25:7a:13:8b:da:c5:ad:e1:fb:46:d6:9e:41:
                    ee:b3:97:e9:2e:5d:6e:4d:5c:17:10:64:2d:49:03:
                    ea:e6:f3:26:3d:48:3d:8d:84:ea:bb:86:f2:6f:58:
                    47:34:f5:9b:21:4d:c7:81:dc:a4:b9:d8:60:ce:b3:
                    14:f2:0f:44:3f:f6:0a:5d:3e:77:cf:fd:5e:39:97:
                    7d:6a:95:96:a5:35:1b:92:ba:cf:b0:0a:8b:a0:21:
                    f7:9c:8b:59:ea:66:d0:f9:be:59:e5:3d:6d:22:61:
                    c6:61:43:c2:fb:6f:a4:5d:d6:12:1c:b1:59:cc:33:
                    26:63:37:59:e8:e5:0f:c3:e2:bd:51:fa:65:7d:44:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:11:88:F0:B2:C9:B7:52:CE:84:73:4F:B5:0C:A2:62:A7:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38da1d6-774d-3c67-9c1e-077c88cd2743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f9:8e:98:fd:1b:c0:37:8f:a9:44:09:20:7b:7f:0d:ad:4b:
         b5:20:25:d0:07:9a:68:7d:7a:58:ef:f9:d5:e3:00:2e:6e:0f:
         c6:52:a5:10:30:25:ef:51:47:ca:69:6b:64:da:c4:c6:94:67:
         67:63:30:31:a8:1c:52:ef:71:90:de:57:d3:2b:c3:8e:fd:ab:
         68:9d:ef:ab:85:83:4d:81:39:11:19:f7:91:72:42:d0:d5:d0:
         e2:31:bd:a9:51:9e:20:ab:45:b4:e9:2b:ce:6c:74:6f:28:9d:
         44:02:77:4f:19:91:28:5c:23:1f:41:bc:be:c5:2d:32:06:e4:
         c5:bb:c6:4b:27:ac:8d:56:0b:6b:09:4f:31:59:e7:81:22:e0:
         e7:92:59:fb:2d:be:74:da:1d:a4:c0:96:0c:b5:8c:b3:06:c7:
         98:77:8f:59:53:5a:3b:1f:a2:3d:4a:ed:e4:6b:3e:0c:9a:29:
         ec:8f:d7:e0:3b:c7:4e:70:f4:1d:7e:74:88:1c:29:3a:ff:63:
         85:13:73:98:e9:9c:3d:58:e7:13:19:07:95:0a:ea:82:52:4e:
         e9:c4:25:c0:52:b0:cb:00:7a:9d:ff:8c:11:0c:fe:af:d5:b8:
         d6:08:b6:23:48:58:28:1a:01:f2:70:00:58:7d:2d:82:6c:3c:
         79:e1:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:12:30 2024 by rpki-client on console-fra.rpki-client.org