Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e417365d-6158-3456-8f55-e42ab18cde09.roa
File:                     e417365d-6158-3456-8f55-e42ab18cde09.roa (raw, json)
Hash identifier:          WM6NbSoHmNH23Z9989Ckho+Oa617dTUhSs8jUQ93qL0=
Subject key identifier:   AF:5C:A9:B9:0F:08:79:2A:53:BD:58:C9:A7:53:D8:09:7D:F2:E5:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F67E3B5449D852593B940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e417365d-6158-3456-8f55-e42ab18cde09.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        96.113.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:67:e3:b5:44:9d:85:25:93:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=a006fbd9-be19-4d26-bbd2-6d8ba490a147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:ef:20:93:18:25:2a:f4:7c:70:63:f2:d8:
                    f1:aa:06:da:76:8e:c2:0c:40:54:15:f1:9d:5c:cd:
                    f7:38:75:c0:24:9d:8f:84:bb:02:7d:14:74:30:f2:
                    81:18:eb:4f:4a:78:30:49:ff:5c:16:f1:76:c8:53:
                    b5:61:7a:df:65:9f:82:52:2e:a7:a3:17:9f:96:21:
                    78:01:89:f3:bb:7a:4f:d1:a3:43:81:44:f9:5e:e7:
                    bb:9d:c7:4c:da:0d:35:d0:69:24:4e:1b:07:31:94:
                    20:94:11:8e:77:82:22:b3:fd:8f:59:7c:5a:3a:5a:
                    bf:f3:63:82:c5:05:1a:30:b4:c3:4f:5c:6b:22:1b:
                    ab:05:6d:b0:20:4e:99:2e:5f:6c:57:1b:bb:57:09:
                    0d:01:af:3f:92:18:1a:5d:fd:db:63:de:a5:26:bf:
                    15:7e:bf:90:b2:70:83:f5:e9:b1:53:46:03:ce:1d:
                    8c:dc:dd:5a:fc:79:32:8f:b3:50:5c:a1:10:a2:18:
                    06:30:12:ca:77:a4:57:be:e7:af:9a:d9:57:af:0f:
                    9d:19:01:e7:8b:7d:b3:63:cd:9d:51:a2:03:ed:1f:
                    90:3d:86:bb:61:f3:43:78:8d:3f:0d:db:35:dc:95:
                    b3:4d:52:60:fe:04:8a:15:5d:60:83:9e:ec:49:73:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5C:A9:B9:0F:08:79:2A:53:BD:58:C9:A7:53:D8:09:7D:F2:E5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e417365d-6158-3456-8f55-e42ab18cde09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:71:be:f9:e1:39:d0:bc:59:f3:ba:8b:a9:ca:ec:07:56:79:
         b9:53:4a:da:0d:2b:98:c6:bc:e5:65:d1:f0:eb:85:08:41:ca:
         d1:f9:56:0b:02:ef:95:b7:f6:9a:bb:c1:e0:6c:66:ba:ff:e1:
         40:01:a0:17:6e:20:11:f5:16:ec:19:6b:cb:b6:c5:c4:6e:7b:
         2f:d0:5d:11:4e:9b:d0:91:4d:7f:28:e0:71:cd:6a:74:7a:af:
         61:c0:ab:c6:d7:c3:56:e2:16:ee:48:70:fe:61:af:9c:93:12:
         5c:83:b0:d7:25:43:50:f4:6e:1d:a1:80:38:4c:d7:b6:72:c9:
         e4:58:28:6f:16:34:4b:5e:8f:e2:e2:3a:9a:af:ed:b4:b6:b7:
         eb:b8:d3:02:5d:35:e4:fe:9a:66:f6:fb:e3:c3:15:75:f8:a4:
         b6:ec:43:ff:77:3c:73:f8:27:d6:2a:fe:e1:97:6d:61:c4:39:
         0a:27:f1:7b:43:6f:9a:1f:99:55:ec:8f:ba:f2:bb:52:e3:29:
         ef:65:e6:19:c8:4b:7c:16:e8:79:60:df:63:25:05:e0:7f:69:
         f8:bb:12:1e:29:c3:01:f6:fb:d0:f5:00:d3:3d:16:8e:dc:5a:
         a0:f3:f6:dd:9e:c9:0c:05:46:9e:95:4d:44:ea:b4:80:b0:ba:
         78:bb:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:46 2024 by rpki-client on console-ams.rpki-client.org