Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa
File:                     e7b60f08-a017-3579-883f-7488034e4ebf.roa (raw, json)
Hash identifier:          LWHAMly9YSBFU8uGM5lLaWzSamSb9CXreGAlB+o5Fqs=
Subject key identifier:   E3:8F:E6:8F:5B:96:9A:7F:61:AF:87:19:2A:ED:96:34:29:51:71:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F65B21ED363530CF7D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        96.112.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:65:b2:1e:d3:63:53:0c:f7:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=aabe4f60-355d-43dd-808d-cea6764861fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:25:57:b5:58:7e:6d:05:c5:b9:93:ee:89:
                    a6:73:ba:86:b5:65:9e:8d:71:ac:e6:09:b7:b7:77:
                    68:cf:91:4e:5a:0b:75:d3:6f:9a:2d:44:f7:85:e2:
                    b1:49:f1:f8:29:68:b2:fc:c3:55:c2:70:a0:3d:bd:
                    75:11:0a:71:da:5f:70:23:c2:4d:da:ba:ed:2d:e0:
                    d7:ba:4d:73:5a:4f:f3:15:86:ee:80:35:7e:c0:e5:
                    31:69:ae:5b:2d:a8:53:bd:5d:79:dd:f7:69:95:59:
                    1b:d0:95:81:03:3c:8e:a7:47:ef:18:dc:6b:85:3e:
                    4b:15:43:b7:c0:b9:19:07:c3:97:33:47:c1:38:3d:
                    26:ae:a5:53:18:d0:2f:b8:61:3c:c7:4e:c2:c4:38:
                    92:75:61:93:69:30:e7:49:34:2a:dd:87:d7:39:e9:
                    c2:68:2f:f9:68:95:1c:2a:8b:ce:84:db:77:e7:ff:
                    39:9b:a4:db:a3:b4:3e:89:c1:f7:84:4d:db:51:c7:
                    5c:d8:22:6b:9b:8c:45:fd:eb:58:74:ca:85:e9:a8:
                    b2:81:2d:66:be:22:ba:58:3a:9e:f2:82:58:2e:95:
                    99:e3:78:bf:8d:ec:91:b8:34:fe:3a:86:09:bc:6b:
                    f4:97:3d:c0:fa:cf:b8:8d:9b:11:13:8f:cd:0f:8e:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8F:E6:8F:5B:96:9A:7F:61:AF:87:19:2A:ED:96:34:29:51:71:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.112.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:d7:12:aa:26:31:b1:1a:d8:d6:30:02:0c:46:0d:5f:9b:
         a0:db:2f:23:06:87:f3:fa:30:79:61:27:5a:57:84:67:62:a3:
         ef:37:66:cf:21:ce:1e:96:d6:98:4a:09:96:f8:bc:95:53:27:
         4b:18:10:c6:f5:74:f1:f9:cc:4e:72:f9:c3:5d:f3:4a:aa:22:
         54:1e:d2:67:8d:2e:28:17:23:47:3e:51:da:03:57:30:89:55:
         82:c1:a2:9f:8e:c8:ab:8b:cc:a4:4a:c0:87:c8:bf:21:4b:92:
         20:08:33:32:a1:c9:00:4d:5b:3e:67:ff:78:c2:21:a9:b2:10:
         7c:26:09:42:47:f5:9a:8b:88:00:8a:b5:51:21:42:7e:29:e0:
         f5:44:ab:86:e3:85:e2:fa:80:17:18:c4:f9:60:e5:f5:de:50:
         ba:3e:a0:22:d5:b6:da:ca:f0:8f:00:02:bc:81:1b:df:4e:29:
         5d:06:72:80:a2:5f:a8:40:f4:48:e9:8a:b6:3a:5a:3e:ea:23:
         22:a7:29:63:83:58:d9:72:06:37:f4:cb:34:08:7f:c5:c3:b1:
         53:57:b0:23:cc:c3:8c:81:be:16:d0:e5:83:8d:d9:4a:af:d4:
         67:d3:89:ed:97:4e:1a:9d:57:d7:68:08:24:ee:d4:f5:ad:0a:
         b4:9a:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:07 2024 by rpki-client on console-ams.rpki-client.org