Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa
File:                     e9561622-f92d-3101-919d-bc09e5e0d935.roa (raw, json)
Hash identifier:          B/SfAkJ8z/2qhtFTVQAuV9dY8oV2I7eg0tz+Y0n0Uiw=
Subject key identifier:   A8:26:C7:B9:4A:7E:CC:E0:7F:5A:B0:8E:1F:41:0A:E6:CD:73:98:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E41ABC68E8FEF4EFB3A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        76.99.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:41:ab:c6:8e:8f:ef:4e:fb:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=eb725700-4084-4582-b835-b17f230ab5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:d5:07:fd:6d:e9:ee:8e:d3:09:9f:cd:4b:
                    db:55:8f:a5:dc:4a:51:90:64:60:d7:29:20:4d:7b:
                    af:30:ba:52:99:e8:9f:a8:79:59:9a:90:08:65:ac:
                    02:8d:52:a8:76:99:d1:30:5d:47:fa:53:e2:65:47:
                    f8:5b:1b:97:74:e9:e6:31:7c:6b:05:5b:ce:4f:e8:
                    e8:c0:cb:bc:00:d7:61:a3:dc:eb:c4:bc:14:82:23:
                    75:65:4e:30:83:30:03:ff:1e:e8:64:03:0f:92:1b:
                    9c:1c:5f:6a:db:85:4c:33:14:45:98:5b:20:de:53:
                    ed:cc:0d:97:7f:d4:ea:ea:33:72:ad:f3:39:01:63:
                    95:51:0e:07:fb:0b:f7:b7:d5:93:7e:ca:da:f8:b1:
                    58:38:4f:5a:ea:97:44:3c:87:98:5e:ce:8f:d1:65:
                    58:03:dc:18:c4:90:9b:af:29:e8:4e:cc:f2:1e:ad:
                    bf:29:9f:b5:72:14:64:d0:93:90:43:fe:06:b5:af:
                    b1:3f:c1:7e:1f:fa:c7:15:05:9b:4e:9f:4b:e3:09:
                    d4:22:d3:99:42:45:1d:68:72:fd:45:20:66:b8:10:
                    11:98:df:21:a6:98:6e:d4:24:f1:4a:98:ed:f9:d6:
                    f1:f0:00:fe:b7:4a:6c:e3:72:5e:8c:c9:f2:11:fd:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:C7:B9:4A:7E:CC:E0:7F:5A:B0:8E:1F:41:0A:E6:CD:73:98:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.99.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:9b:df:aa:ae:06:a4:cb:68:9d:07:b6:31:7a:81:77:84:
         c4:b6:d6:19:48:f2:37:9a:ad:53:66:6c:08:f8:c7:0f:f0:83:
         a5:ff:74:72:10:30:ac:4d:08:67:c3:23:d9:a5:98:5b:74:74:
         d9:c8:e9:d2:5c:84:9d:88:8d:c3:9d:41:c7:83:15:23:e0:e4:
         31:9c:c3:5d:77:0b:1a:c0:b7:64:a1:33:74:e5:70:70:b6:87:
         0c:35:f7:c7:14:30:73:81:8d:a4:78:25:5d:eb:cb:5c:be:e2:
         95:b0:3e:05:1e:36:00:4b:b0:83:5f:d6:73:69:87:96:f0:fd:
         37:7f:26:98:d1:d1:05:8c:28:a7:9f:8b:29:ab:6f:00:3a:0f:
         87:fd:79:90:2e:72:28:2c:26:d9:56:68:9f:c6:02:5f:03:bb:
         9f:f3:ef:e2:92:66:8e:ff:eb:e7:3e:f8:02:5a:48:9c:d9:8a:
         a9:b1:14:49:e7:f6:bd:f5:31:9b:7f:de:a7:ee:4f:79:7a:e9:
         22:27:08:00:d0:c1:3e:b1:c7:e3:6a:a1:ad:79:5d:10:35:93:
         8e:30:85:af:34:0e:95:aa:20:d6:24:a0:f6:d4:47:bd:b8:f3:
         ec:08:42:b9:4a:42:e0:68:34:ec:4f:6d:2d:bd:94:5c:74:99:
         6d:0e:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:37:23 2024 by rpki-client on console-fra.rpki-client.org