Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc347685-4194-3ba5-812d-d4208c200498.roa
File:                     dc347685-4194-3ba5-812d-d4208c200498.roa (raw, json)
Hash identifier:          LJUu3GRmasXC1sqo9F8bATCj5NrLvIsPMm9Rizh7unQ=
Subject key identifier:   E9:42:A2:07:3B:F8:90:B2:C7:C9:B5:B4:84:34:36:5A:0D:70:05:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584762D666BE72CEE95E56BD7500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc347685-4194-3ba5-812d-d4208c200498.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     7922
IP address blocks:        76.96.252.96/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:66:be:72:ce:e9:5e:56:bd:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=e7247d38-a991-4c4f-8f55-127face1c3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:30:7a:16:35:95:fe:6f:e0:79:f5:97:f2:
                    40:6d:d0:71:3f:cc:cc:2b:d5:af:08:7d:1c:4c:05:
                    b1:1e:66:82:da:82:f9:40:e2:32:02:5e:71:af:8a:
                    c6:64:58:3b:f9:16:dc:52:74:3a:d2:14:c6:03:38:
                    d4:4e:4b:ef:44:be:03:47:28:df:61:0e:b4:17:14:
                    44:c3:d9:4e:de:f2:9f:3d:34:e8:40:ad:24:b4:6a:
                    c6:a6:24:f6:f1:7b:2b:4a:5d:dd:03:a9:78:1b:12:
                    57:21:4f:26:62:bf:a9:84:e2:e3:90:65:ec:6c:e5:
                    3f:84:20:2b:5d:07:79:a5:53:25:76:3f:80:18:74:
                    9b:04:72:45:43:1f:a2:a5:e4:1c:19:02:c5:7c:bc:
                    95:33:61:d3:6a:a4:98:62:66:40:e9:3b:ac:cc:c1:
                    05:e9:8c:5f:ce:be:ed:25:8f:6f:dc:1f:db:4d:59:
                    e5:13:f9:5d:35:fc:e4:de:50:34:2f:e6:aa:9f:73:
                    e7:97:67:eb:af:cb:a6:b8:27:76:39:1a:43:83:c2:
                    00:64:e2:19:51:33:ae:1a:c1:2f:88:eb:c5:9d:14:
                    f2:87:ba:1e:e2:53:93:4e:e0:3b:c2:53:80:6a:03:
                    e9:d9:66:28:c7:a5:4f:4e:8a:00:1f:79:d8:d4:90:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:A2:07:3B:F8:90:B2:C7:C9:B5:B4:84:34:36:5A:0D:70:05:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc347685-4194-3ba5-812d-d4208c200498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.252.96/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:22:84:09:41:6a:cf:11:3f:df:6c:92:8c:f1:a8:41:e4:2f:
         f0:a2:aa:bb:3d:55:48:46:ef:04:cc:12:12:95:a4:38:27:a8:
         da:51:b4:68:40:86:af:5d:88:e7:f0:83:d6:c8:48:f5:49:cd:
         4d:1f:42:47:f1:b9:2f:13:70:53:12:62:11:a4:70:1c:8e:2a:
         ad:ef:e2:2c:86:b3:1d:f2:1f:b6:48:22:3c:49:ad:7c:91:fb:
         0a:da:08:f0:49:4b:99:f4:d0:dc:c4:0a:a6:d6:27:84:01:c2:
         31:82:cf:44:c8:68:d6:03:17:5a:55:8a:3a:9b:04:da:9e:21:
         63:88:84:6c:d0:b4:88:15:8e:8b:50:1e:e7:fd:d7:49:ec:27:
         f5:b3:2d:34:be:07:b8:25:6e:c4:a1:34:3d:83:a3:26:94:c1:
         ad:5c:90:35:85:2f:a5:93:f2:c4:33:3c:3a:8e:0a:22:e8:f1:
         52:63:f9:17:75:8e:ed:c2:08:cf:74:d8:f5:52:df:4c:1e:36:
         b5:ae:6e:c8:cb:7d:07:f8:80:36:f9:f0:46:0b:9d:3f:4e:a4:
         19:aa:b0:63:78:68:0e:8e:7d:e5:17:66:8f:30:99:d9:7e:30:
         15:95:c0:93:16:43:5c:ee:02:e8:5c:cf:6a:76:c8:e3:36:c6:
         b5:9f:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:04 2024 by rpki-client on console-ams.rpki-client.org