Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f17844c7-d71f-334b-8414-6c3b55b9d2e8.roa
File:                     f17844c7-d71f-334b-8414-6c3b55b9d2e8.roa (raw, json)
Hash identifier:          5RLDL+IbIDVzyHuuAu+hNvxLHyQWyAa+Kofc8zFHYSE=
Subject key identifier:   A3:D9:7B:DA:43:E6:1A:8D:05:21:A0:7A:D7:2E:33:17:10:D0:DB:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D8501C84E2772922AA6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f17844c7-d71f-334b-8414-6c3b55b9d2e8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        76.21.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:85:01:c8:4e:27:72:92:2a:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d711c834-3df3-4229-9d63-d08ed38b09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:c4:42:e9:cf:47:98:cf:1f:1f:6f:27:1e:
                    ca:51:29:a5:07:0c:1d:9e:0a:ad:c0:29:9f:e0:b1:
                    02:95:fd:48:d1:f0:3e:47:1d:9b:82:db:ff:84:2f:
                    6c:67:7f:b1:7f:89:6a:8f:f0:4a:0e:86:a0:f5:67:
                    f8:eb:34:78:c9:21:c3:e7:90:a6:6d:b2:73:1c:10:
                    18:52:2d:26:44:e0:82:ee:b8:6c:74:b6:da:c5:bc:
                    af:c4:91:60:53:b3:65:99:1b:e0:e0:af:c4:46:93:
                    e8:09:e7:be:79:80:71:37:87:75:d8:9a:c5:18:73:
                    18:dd:90:47:75:1f:de:cb:a8:a5:a0:37:66:78:46:
                    b3:e1:49:97:31:f1:88:0d:18:43:7d:a2:75:26:37:
                    dc:65:8f:74:a0:7c:10:76:09:90:b6:e1:d2:65:e9:
                    0f:6b:08:d1:6b:f3:a1:7e:a7:d8:0b:af:58:ae:83:
                    84:cd:36:97:b3:14:22:4e:e3:0c:d1:7f:48:c3:fe:
                    65:28:36:21:36:64:24:ca:03:12:de:0f:4f:ad:72:
                    c3:94:8d:95:1b:b8:58:66:aa:3b:7b:90:c7:02:76:
                    33:d1:c3:81:78:16:e5:ac:0a:40:d9:a0:37:b5:1a:
                    f0:3b:a3:90:71:e9:47:da:77:64:fc:88:20:56:2f:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:7B:DA:43:E6:1A:8D:05:21:A0:7A:D7:2E:33:17:10:D0:DB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f17844c7-d71f-334b-8414-6c3b55b9d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.21.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:21:30:4e:db:aa:5a:2f:ec:53:96:6b:95:c5:d9:2f:b0:fd:
         c6:df:1e:60:30:50:7f:b5:7e:21:2e:13:ae:b3:9a:e9:d3:5c:
         14:f5:a4:df:cd:c3:ed:95:64:38:f9:e4:17:4a:62:53:86:0d:
         55:00:1e:2b:43:21:c5:6d:15:f7:45:77:d7:93:6f:25:ba:75:
         61:b9:fe:ba:7b:6b:ad:08:83:13:be:2a:0b:cc:f2:32:42:06:
         7e:52:fe:0c:e7:b0:e2:45:08:c2:9f:c0:ad:a2:8e:cd:97:64:
         1d:0c:b8:9d:97:ae:1e:b9:57:50:dd:9d:e7:cc:fb:36:94:b5:
         15:84:5a:eb:91:05:60:00:29:42:19:4b:82:92:d5:1a:c7:ed:
         18:63:39:3e:a2:d0:37:c7:39:23:5f:94:96:8a:7b:fd:a6:ce:
         df:9a:83:bf:4b:8e:94:79:f8:9f:6f:80:96:14:56:21:0e:6d:
         cf:2e:d9:cb:71:f6:5b:f0:b0:b9:4f:24:d0:53:3b:43:bd:17:
         ee:9f:2d:73:55:8e:94:78:c5:23:29:24:d0:30:35:c6:e3:84:
         28:f2:98:41:ad:74:37:ca:20:da:4c:1d:b3:e8:f1:2c:cb:bc:
         42:f6:c0:75:d0:6b:96:18:de:08:ac:71:97:99:6d:58:08:41:
         6c:01:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:18 2024 by rpki-client on console-ams.rpki-client.org