Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43ddd61-a955-3848-b198-d947f66ef376.roa
File:                     c43ddd61-a955-3848-b198-d947f66ef376.roa (raw, json)
Hash identifier:          d/7Xtorv6xqf09n9MZlrrDNLxx8V8MwCIIzWXUoS+KE=
Subject key identifier:   24:23:3B:38:C5:47:09:CE:AC:A2:B0:5F:83:70:01:81:F9:50:B9:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7F474A330D25998DF4400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43ddd61-a955-3848-b198-d947f66ef376.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        76.96.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:f4:74:a3:30:d2:59:98:df:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1aa8dd3d-f9a0-49a1-a7c4-a26188941052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:e2:a6:63:c8:04:84:f6:58:0d:eb:9c:af:
                    49:bf:de:96:71:82:69:0c:fb:76:6f:6f:ba:71:1f:
                    d2:62:21:6c:e9:9b:5b:88:59:ce:fe:fe:3e:9f:3d:
                    48:3a:e8:f9:e1:69:f9:1a:ec:05:6b:67:89:d5:e6:
                    1a:df:71:c1:ff:f1:44:2b:f6:8c:33:85:15:9b:b9:
                    7f:94:ca:9b:ad:00:8c:f4:d5:93:da:75:ec:a9:20:
                    68:9f:08:61:1b:eb:65:49:f9:14:3b:97:d7:df:fa:
                    2d:f4:39:7e:ea:22:6d:f0:de:bc:2a:b6:6c:d7:ae:
                    bd:ed:5c:0e:fe:c6:cb:b1:66:c5:38:cf:81:9d:a2:
                    08:5e:ec:ca:74:72:e2:89:f4:f4:dc:80:35:55:5e:
                    95:83:17:0f:2b:66:5c:1f:98:b8:78:a2:b7:68:e2:
                    ae:e9:47:39:51:de:d9:30:a1:17:ca:59:a7:cd:32:
                    1c:2f:78:c0:e7:58:c0:6f:09:d9:ea:8e:2b:4a:b9:
                    ae:72:ac:0e:ec:87:3d:79:cd:09:00:d3:a9:7c:dc:
                    4f:ac:36:8a:23:88:34:68:ae:13:b6:11:82:e9:0a:
                    7d:cb:61:7d:f1:30:5f:73:11:0a:25:9a:fc:d4:47:
                    6c:b6:7e:c9:be:82:e7:b5:4e:bc:7b:21:b6:08:db:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:3B:38:C5:47:09:CE:AC:A2:B0:5F:83:70:01:81:F9:50:B9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43ddd61-a955-3848-b198-d947f66ef376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:e4:69:e7:7f:7a:bd:73:c9:52:63:09:fc:bf:8b:cc:9a:
         fb:58:eb:7c:ee:0a:28:00:cc:4a:64:9f:39:7a:66:5a:d1:a4:
         37:8b:8c:8a:43:be:fc:8f:9c:c9:33:0d:20:5a:ca:80:0f:5b:
         a1:f5:f4:dc:60:9b:88:0a:eb:31:b7:aa:8d:2e:1e:4c:8a:18:
         0d:68:a3:bf:36:ef:88:64:82:08:1d:35:37:c9:17:3b:ea:51:
         ff:d9:49:7d:54:d3:cb:a3:90:11:54:ff:bc:ab:fd:2e:37:1e:
         4f:ca:e5:fd:5e:7f:e6:ee:80:3a:fb:a6:dc:c2:39:28:a7:e2:
         e4:89:6d:43:ca:3b:b0:dc:b9:0e:1e:3d:0a:c9:7d:a0:43:cc:
         06:3d:af:ff:5c:48:38:7e:42:27:88:36:12:ec:58:d0:d2:ae:
         37:29:ea:bc:aa:64:c7:e2:c3:df:fd:c5:89:19:aa:8f:dd:fb:
         2e:b7:fc:13:c3:21:77:24:65:f3:fb:71:8d:64:c8:9f:ab:32:
         f9:b2:c3:ea:6a:fc:98:40:47:7c:c4:76:1d:32:03:fa:06:4d:
         91:d5:ef:b8:27:c7:1c:2b:f9:3e:94:0d:cf:90:db:3f:04:96:
         7b:2f:39:23:3f:7f:ad:8b:24:75:cd:f3:ca:58:68:16:ce:7f:
         42:da:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:30:53 2024 by rpki-client on console-fra.rpki-client.org