Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d731ca68-35f1-3466-a193-1ad9a82b09c0.roa
File:                     d731ca68-35f1-3466-a193-1ad9a82b09c0.roa (raw, json)
Hash identifier:          oOWO0cRvuru2H6jac19Khf/q35aqqtkBQWW1opxJl2c=
Subject key identifier:   C8:20:7C:DE:98:F5:BF:88:20:58:04:3E:1C:3B:BF:B6:CB:5E:B2:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F7C198D34E0D7544CBF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d731ca68-35f1-3466-a193-1ad9a82b09c0.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        96.119.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:7c:19:8d:34:e0:d7:54:4c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=53eb2d83-98d4-44a5-9901-72d9871ae8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:35:58:aa:3f:31:10:e6:b1:8a:b2:9f:63:
                    8e:b5:16:6f:6e:4d:b0:96:0a:27:19:45:7c:dc:42:
                    b7:85:0f:d3:89:97:cb:35:95:17:78:af:36:33:b9:
                    7c:08:40:81:97:ca:47:21:d5:80:53:d1:c2:f8:67:
                    e1:76:55:02:11:01:bf:81:08:e8:b5:f7:81:e6:b4:
                    51:bf:d9:73:3e:50:78:d4:52:c3:f0:07:71:ac:5e:
                    98:9d:be:27:e7:3b:ba:20:5d:2b:ea:4c:8a:54:a8:
                    89:d7:78:b2:d7:eb:6a:05:6f:8c:b7:fd:f0:09:ed:
                    e7:25:0a:8f:18:bf:8f:e1:0d:db:c6:88:e3:99:26:
                    5c:8c:a9:8a:be:07:22:37:d7:ea:15:51:0a:b5:e1:
                    94:de:e6:13:0f:c4:56:bc:fb:05:78:8f:cb:4d:2f:
                    16:2a:d2:57:4b:cd:43:97:7b:5b:d1:b7:65:e8:9a:
                    72:8d:d6:28:a7:be:a7:c8:05:7a:d6:7b:b9:f3:4e:
                    6b:8d:b7:df:4a:f8:10:e4:21:1b:ca:b0:8f:41:9c:
                    35:6c:42:52:41:bd:c7:e8:ef:32:93:a7:36:f8:ed:
                    b2:17:05:8e:c3:02:b8:33:d0:0e:14:e3:b8:13:a6:
                    76:39:fc:58:e7:a0:77:18:15:fb:04:67:35:ee:90:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:7C:DE:98:F5:BF:88:20:58:04:3E:1C:3B:BF:B6:CB:5E:B2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d731ca68-35f1-3466-a193-1ad9a82b09c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.119.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:d9:4e:93:81:cc:52:fe:ff:3a:18:f8:dc:90:25:31:20:
         4c:44:1d:f6:08:54:10:f1:2a:da:ff:e3:51:95:00:ab:85:cf:
         10:72:59:37:ed:41:f9:b8:79:df:df:22:4d:0f:26:ac:97:a1:
         bd:cd:c9:ad:37:f9:ba:2c:b4:24:e5:61:c6:44:8f:78:a7:41:
         30:89:65:69:8b:1a:25:6a:e3:8d:b7:11:db:f6:73:e9:b1:bd:
         b7:d2:64:51:ce:15:23:73:f4:75:ad:35:7d:86:99:7d:57:c7:
         57:29:c6:db:1c:5c:57:0b:46:1b:ff:8e:82:03:a2:df:16:92:
         f7:34:44:b0:b1:6b:35:84:54:c4:88:18:cb:d3:28:16:8e:dd:
         82:b2:1a:f9:3b:71:c6:0a:83:2c:27:45:77:94:f6:ec:8b:56:
         cb:3c:5c:c6:1e:88:ee:c1:ad:e7:6b:82:fe:87:e8:0e:a4:6b:
         0c:b8:38:68:6d:48:b0:3e:5a:21:59:d4:61:4d:38:19:3c:dd:
         cc:47:27:6d:c1:24:a9:db:1d:64:e1:5f:21:96:21:be:7c:a5:
         27:2e:18:1b:fd:e3:c7:50:ec:29:84:4d:d2:20:7b:55:45:e8:
         82:cd:73:0f:64:4c:43:1b:3f:a5:54:ea:03:ca:a1:ea:b0:b3:
         1f:bf:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:55:50 2024 by rpki-client on console-ams.rpki-client.org