Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa
File:                     f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa (raw, json)
Hash identifier:          JWoRXBr7fH3f95Qf4QOGLFUQy+AYXijP2pO8coctS9w=
Subject key identifier:   32:9B:B0:1C:D5:6E:5F:A6:65:6B:DB:75:AB:88:8A:99:8F:6E:B4:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6FD1BFEDD30A26EFFCC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        76.122.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:fd:1b:fe:dd:30:a2:6e:ff:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ced51bdf-af24-47ae-acb7-0c6ab440b725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:a3:ed:4a:52:fe:84:32:e4:cd:76:a3:c3:
                    64:17:fb:65:ef:97:02:57:d8:e2:67:a8:ae:50:82:
                    1a:0c:27:8a:a1:58:0e:db:a1:c3:7b:ef:60:e6:ed:
                    e8:d0:52:b5:c2:b5:56:6c:08:2e:e0:ff:ca:34:36:
                    6f:1d:0a:6c:d1:4a:6f:92:b9:c9:c0:c8:a4:33:ca:
                    0f:e3:70:72:63:b3:84:ca:5c:fe:74:a4:83:d1:8c:
                    d3:1b:ac:32:37:7e:25:e9:8e:25:72:16:82:1a:c8:
                    9b:9b:58:e9:e7:86:f9:65:27:d3:07:33:2c:cc:38:
                    80:ca:73:43:fc:c0:af:08:68:34:72:43:c1:a2:e8:
                    5b:4c:45:61:c7:e0:26:e8:55:ec:a4:23:40:39:35:
                    47:39:bb:fc:d7:c6:01:f7:f5:64:2b:94:5f:fb:7b:
                    e7:62:6f:97:57:ab:46:29:89:53:3b:ad:f0:90:20:
                    7f:60:84:36:4c:ad:64:4e:7e:2f:7e:ba:c4:60:fb:
                    8c:c6:44:86:2c:f5:65:b0:81:48:a0:9e:7a:16:4e:
                    35:2e:22:30:c9:f7:2b:8b:ba:51:9d:73:6b:c5:6e:
                    5c:88:ec:96:70:6d:8c:95:61:dd:f3:ac:b9:6e:23:
                    39:58:b2:03:94:94:22:00:c5:04:74:f5:fa:85:f3:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:B0:1C:D5:6E:5F:A6:65:6B:DB:75:AB:88:8A:99:8F:6E:B4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.122.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:77:72:c5:29:84:ea:1b:82:0a:22:15:19:b7:ca:c2:17:c2:
         66:20:47:02:3f:46:a6:2e:f3:60:e7:e7:c4:b0:04:9b:fb:a2:
         9f:be:7d:21:46:0e:e2:69:05:59:54:87:90:56:f9:07:29:a6:
         cf:60:31:40:14:11:14:27:64:35:1f:66:d8:7b:34:cd:4c:1c:
         f3:57:fc:ed:57:95:a2:b7:3d:00:f9:bb:46:5d:78:8d:15:ff:
         e1:69:18:60:e4:bd:b8:44:e1:31:6c:d8:fe:cb:ab:28:97:e0:
         b3:4c:7d:84:39:f6:a1:c2:41:33:11:11:0b:f9:72:63:f3:85:
         78:99:43:15:58:08:e2:ae:a1:7c:70:a3:4b:52:55:32:d5:e4:
         a6:7a:55:f6:eb:e9:59:3e:93:be:d5:80:68:8b:23:cb:44:f4:
         8f:74:d4:2e:9f:47:96:66:7c:de:5d:02:03:da:8b:28:62:da:
         fc:72:83:9d:b0:23:ca:de:76:5a:5d:c0:ce:96:48:f2:18:47:
         3a:9c:18:92:32:e1:55:41:44:93:87:9d:4f:d5:f8:eb:bf:43:
         1e:a9:b5:63:f9:07:36:e0:ad:e1:49:ff:bb:01:6f:87:12:0f:
         87:d6:54:ee:b5:e2:f2:5c:09:fc:8a:19:5a:a2:e7:a6:a3:7b:
         7e:07:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:24:25 2024 by rpki-client on console-ams.rpki-client.org