Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16cec94-8049-38a4-a463-488644a9ff6c.roa
File:                     e16cec94-8049-38a4-a463-488644a9ff6c.roa (raw, json)
Hash identifier:          Gxq11jAy0RpKELkfaoNmBoUtBj5Qz9pFybESecpNtpc=
Subject key identifier:   67:4E:67:82:24:5C:06:9A:71:0E:72:9A:31:EE:9C:B6:45:99:65:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584761718A88580C0560C3539DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16cec94-8049-38a4-a463-488644a9ff6c.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     33287
IP address blocks:        76.99.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8a:88:58:0c:05:60:c3:53:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=c98e1d04-6532-4088-8ec9-9463645346cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:cb:c9:e3:94:d4:ad:71:e7:5c:fb:b5:45:
                    90:f4:7a:4d:0f:39:06:bb:69:67:8d:be:0f:d8:f4:
                    58:c1:6a:3c:39:71:2a:1e:5f:2c:fa:c3:2c:82:b1:
                    60:92:a9:ab:89:61:58:20:4e:b6:0e:bb:bd:86:25:
                    01:ea:17:e7:69:c9:9e:d2:98:77:84:ec:39:b6:fa:
                    65:5a:cc:27:4d:e1:b4:d3:2e:a0:f1:5a:c6:1e:ad:
                    82:76:2c:02:be:af:1e:6e:10:d8:e5:0d:ce:0c:4b:
                    f2:d2:68:db:03:40:cd:a8:db:fa:ea:20:4d:bb:a5:
                    86:82:d9:a8:d1:af:3e:a3:67:78:5a:82:a3:19:7a:
                    2b:e2:e5:c4:15:a8:7c:dd:2f:ed:bb:3d:79:c6:e7:
                    68:87:93:b4:6a:45:76:a4:c6:85:3a:b0:04:b0:f3:
                    7d:f7:a9:f2:5a:6f:1a:97:be:01:e3:4f:dd:e7:db:
                    65:02:ea:a5:dc:22:37:a8:b7:d3:ce:ab:81:7a:e8:
                    32:20:f4:97:bd:66:1d:c4:4d:09:32:1f:6e:c6:10:
                    00:cf:2f:af:d0:41:29:92:46:eb:41:ae:cd:a2:18:
                    5d:89:2b:a4:c7:31:a2:6f:43:1a:7b:c9:72:8d:d7:
                    2a:bf:a4:3b:86:3f:bc:95:24:7e:a7:e6:97:44:01:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4E:67:82:24:5C:06:9A:71:0E:72:9A:31:EE:9C:B6:45:99:65:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16cec94-8049-38a4-a463-488644a9ff6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.99.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:b0:9a:fe:cd:2f:bb:3e:12:1a:e4:16:61:fd:94:a9:df:
         0a:0e:97:42:8c:2f:3e:53:4e:32:2e:83:48:51:f9:70:88:8c:
         ae:b5:38:78:2f:96:d8:02:11:6b:af:57:fe:d4:e5:4e:62:2d:
         54:91:e7:ad:77:0e:31:1f:25:bf:41:11:25:7e:da:ea:5e:4e:
         cc:32:43:83:6f:0d:95:99:a4:03:d4:34:5e:51:9e:df:3e:61:
         cf:e8:d9:32:11:0b:47:3c:e8:af:cf:31:f9:7c:71:84:af:6d:
         23:25:5b:82:28:0b:68:19:d5:66:35:f7:e0:00:d6:91:4d:d3:
         bc:82:62:fe:5c:08:aa:12:c8:85:79:fb:85:d5:df:f2:db:dd:
         33:95:11:60:10:57:39:ad:c8:0d:58:65:44:98:2b:41:74:fd:
         5b:d1:97:12:75:fc:a4:29:7a:5b:ff:d9:44:7a:37:cd:cb:b0:
         14:92:9e:76:ca:77:7e:b7:52:fe:20:1a:55:e9:f8:00:b3:2f:
         7c:99:b2:60:9a:62:f3:86:5a:c9:36:18:9f:dc:9d:be:54:6a:
         cb:ee:4e:15:7d:06:f0:35:43:20:36:7a:d2:59:c1:5d:07:b7:
         1d:02:de:b3:1f:1d:62:c1:cb:8f:7a:b7:00:34:72:ad:40:73:
         9b:db:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:36:41 2024 by rpki-client on console-fra.rpki-client.org