Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b622d7-f2dc-3f1c-a303-3da23617c74b.roa
File:                     c3b622d7-f2dc-3f1c-a303-3da23617c74b.roa (raw, json)
Hash identifier:          WPp0DBTnb+/XVYLEQn5gvnLyVhKvls/+8JT3CChucK0=
Subject key identifier:   DD:F2:51:B9:AC:B2:F3:43:20:60:7A:8B:73:67:B6:DF:86:3E:F5:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E59FBCAD12E2E9C105B340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b622d7-f2dc-3f1c-a303-3da23617c74b.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.145.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:9f:bc:ad:12:e2:e9:c1:05:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=52dfd87c-cc92-4c43-9c0f-e74a12d1002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:36:19:cd:fa:53:3c:f2:10:77:34:18:79:
                    2a:01:fc:06:97:69:26:fb:ff:43:bf:ba:7b:a4:ec:
                    a0:e8:8b:d0:cb:02:b3:4e:91:a9:d8:31:fe:cb:94:
                    9c:a8:13:bb:68:14:e4:b0:95:ef:cd:9c:fb:a0:29:
                    f8:2f:2f:a5:95:17:54:fc:02:53:a7:99:95:f6:f5:
                    23:66:72:74:eb:16:98:07:99:42:03:85:f9:02:76:
                    b2:d3:49:4f:b5:dd:ad:d2:42:26:41:63:85:3b:ca:
                    8f:62:65:ba:43:64:88:88:9b:8d:34:be:ed:06:3a:
                    d0:85:92:b7:ad:6b:66:71:3e:85:87:4e:6b:58:22:
                    5a:40:81:07:f7:5b:89:85:8a:57:5a:1f:18:4c:d0:
                    55:24:85:39:ae:43:0b:29:d2:97:29:12:1f:22:7c:
                    0c:58:7c:2d:70:ee:b6:bd:28:c3:b9:58:74:f6:d8:
                    37:35:bc:bd:18:d9:a3:b0:d3:3a:16:3a:7d:ed:83:
                    d9:d0:2e:cb:24:da:e9:c1:53:03:3e:f4:cc:80:08:
                    b9:9f:4c:9a:70:c0:49:1b:a4:f2:30:de:4b:06:83:
                    4a:7b:fd:08:61:b0:d7:d2:b0:a8:a5:ab:1c:48:1f:
                    d9:d9:28:2f:fe:d0:48:ac:a6:ae:78:60:44:4d:15:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F2:51:B9:AC:B2:F3:43:20:60:7A:8B:73:67:B6:DF:86:3E:F5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b622d7-f2dc-3f1c-a303-3da23617c74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:ac:e8:62:f3:80:a4:c9:19:97:16:a3:3e:a2:5e:a4:66:
         86:c1:92:b5:60:c2:99:a8:52:63:31:d5:27:b4:b0:80:c6:a3:
         ba:1f:ac:48:0d:de:f3:2d:f9:98:58:bc:2a:e7:2f:40:82:0f:
         72:6b:74:45:01:26:40:c1:80:38:49:be:91:c3:41:39:3a:44:
         ad:eb:76:56:c4:1b:e9:6b:7c:5d:4b:c3:8c:1d:ba:db:ca:19:
         a5:2d:ae:5a:af:ad:ac:97:1f:a7:fc:c2:d9:e2:6f:8a:29:34:
         e9:2e:6b:a9:0b:38:54:9c:09:59:9b:3d:43:f7:af:cb:aa:db:
         78:68:d6:a1:a6:a2:62:c2:31:fe:1c:93:ad:ee:8e:64:3a:f6:
         ac:bd:18:90:c4:a9:8f:3f:82:97:d8:c4:83:bc:29:c0:22:50:
         9f:5e:39:2a:41:fd:df:0a:1e:06:6c:b0:1e:d4:98:e7:19:b2:
         43:99:ff:6e:5a:13:c2:48:66:82:ef:db:d4:ee:42:b6:22:df:
         e8:b5:b0:b4:73:ff:8f:5c:df:6b:22:bc:0f:fa:35:84:7e:57:
         2b:30:bd:e8:ed:0f:53:88:b7:13:fb:5a:c3:ee:7a:c0:2c:ad:
         7a:f9:84:9d:5c:e5:58:bb:65:19:98:de:a2:e1:ea:97:b8:3e:
         cd:e4:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:30:47 2024 by rpki-client on console-fra.rpki-client.org