Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa
File:                     cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa (raw, json)
Hash identifier:          yknswYnxYmVYbv6O7ksWgTLHOWo6diVgDas0tFunZtg=
Subject key identifier:   8B:17:00:C3:95:11:2E:69:87:EB:DB:89:E2:93:15:68:51:07:C5:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C840E74AD97E9E31514700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.31.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:40:e7:4a:d9:7e:9e:31:51:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=dcb77604-5d25-40b5-995e-f2b8a872d402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:bf:68:83:9b:d6:00:27:0b:f7:8d:cf:d8:
                    41:3b:3c:80:e5:6a:aa:47:50:ae:41:ce:9b:ae:ec:
                    cb:be:6d:2c:ac:8d:b1:e4:b2:fa:46:86:a2:d9:ff:
                    31:78:a6:21:e9:9d:a5:74:c4:28:68:68:ee:00:7f:
                    fe:a3:3f:f1:7b:41:a2:c4:5d:69:ed:d5:87:5a:f6:
                    17:0d:c9:b6:95:4a:aa:6c:e5:5b:af:ed:03:04:b2:
                    9c:66:c7:26:c5:74:fb:2a:ec:0f:81:89:72:dc:6b:
                    43:fb:80:53:85:53:96:73:15:fc:e2:d7:c6:6d:e6:
                    ad:fd:d4:89:bc:ef:d2:a2:f5:71:c1:21:f5:92:fc:
                    d7:5b:36:4c:a8:2d:5c:08:a4:62:c2:21:9c:28:59:
                    50:96:72:b0:c2:d2:94:32:f5:8c:19:63:4b:35:82:
                    2c:68:b5:ba:5b:7d:f1:87:5d:62:12:a0:6f:34:07:
                    cd:3c:0b:b9:d2:53:7f:2b:13:03:98:87:37:52:e9:
                    bb:ef:16:b3:57:0b:24:59:14:0c:18:80:78:22:8f:
                    fb:79:a8:d0:62:c4:02:68:1b:d1:e3:ae:96:ae:98:
                    8b:f6:b8:a5:a0:9b:88:c3:11:fe:8f:f3:0e:be:31:
                    1b:01:86:d8:78:a7:e9:65:8b:b4:79:cc:a2:72:3c:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:00:C3:95:11:2E:69:87:EB:DB:89:E2:93:15:68:51:07:C5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:d9:74:39:84:d7:e3:31:07:56:9a:8e:fc:ac:b0:87:93:
         02:c9:00:8e:25:e3:d6:be:a7:3c:2c:4b:dd:c7:13:66:5b:62:
         b0:cc:07:5d:e3:36:c1:51:d3:37:c7:b9:b0:9d:5c:97:df:e7:
         58:24:7d:ba:ba:0c:f8:84:65:c3:9d:9d:88:85:e6:ff:d8:e2:
         cc:6b:09:ab:17:62:f3:7d:af:0f:ee:ac:c2:ac:71:d3:e9:74:
         07:6d:c8:13:0d:18:8e:88:60:97:89:b3:0a:cd:07:00:da:fb:
         7f:db:de:c4:d3:a7:a8:80:05:29:e0:7d:58:b9:2a:84:78:31:
         b0:78:a7:9f:59:94:b9:f3:56:1c:07:f4:c0:0b:f2:22:50:cf:
         04:fb:90:54:3d:5b:00:9d:f5:a4:09:98:4b:74:9d:9b:11:d4:
         e7:e6:92:ec:c3:7b:03:52:31:c3:2b:b2:43:c3:32:61:82:dc:
         b2:14:df:78:23:af:25:5b:3c:34:b2:85:b0:00:1f:65:4a:1f:
         fb:f2:f1:22:29:94:88:47:eb:b0:8c:a5:e4:b9:90:89:9f:12:
         29:f1:68:4a:40:18:eb:84:3c:5f:50:f9:8d:5a:8e:c9:29:09:
         6f:76:bc:50:41:43:58:9b:f3:d1:3e:31:af:83:e7:57:e3:d7:
         02:5b:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:12:50 2024 by rpki-client on console-ams.rpki-client.org