Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa
File:                     87b3aef9-2e02-38eb-b992-85bcb4568f26.roa (raw, json)
Hash identifier:          gXe4b4lZD4tCfS6b043wJWudgtQ4r/pOgb6JroGAsho=
Subject key identifier:   EA:C2:40:0F:67:EC:8C:7E:3B:D9:A5:B0:E1:8C:FC:1C:0A:9F:BD:B7
Certificate issuer:       /CN=4e8d73da-047f-4a47-9523-47bcb685cad5
Certificate serial:       010D0C9F432858472C65E1FCA1DACF45C7F6B800
Authority key identifier: EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     11949
IP address blocks:        96.47.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e1:fc:a1:da:cf:45:c7:f6:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8d73da-047f-4a47-9523-47bcb685cad5
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=ba83d517-e81c-465a-a361-f4b9cd1572e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:aa:b7:df:12:06:be:8f:a8:1d:5e:81:6b:
                    2f:a2:91:c8:24:c8:e9:19:5e:84:50:67:3d:d9:68:
                    41:4a:c5:f1:37:e9:bb:15:33:5d:13:b2:e8:42:34:
                    b6:53:7c:85:56:15:71:15:09:2e:bf:75:19:9a:1d:
                    79:58:88:6f:38:61:69:ee:6c:88:eb:5e:5d:03:9b:
                    61:ea:88:ee:45:66:7b:ef:9a:4a:2b:34:c1:6d:06:
                    b3:b3:a9:10:6c:f3:75:13:a1:c7:9e:52:93:4e:2d:
                    85:ca:52:f4:b2:27:c6:82:58:d3:06:34:c5:69:5f:
                    8d:ad:cc:c8:cb:99:0a:0f:c8:5f:49:af:55:0b:34:
                    f0:54:02:38:67:34:fc:45:e9:7b:67:87:78:ef:9f:
                    f5:76:10:31:c8:59:2d:54:ed:64:4c:f3:97:09:fe:
                    00:6c:21:21:a2:5f:3f:5a:d2:82:9a:8c:fa:e5:54:
                    a9:fa:7a:1e:ac:2c:41:ec:c1:df:c9:9c:48:09:e4:
                    5d:51:2c:e9:c5:96:8c:9f:f8:b2:e1:ce:23:02:99:
                    bf:3f:ce:b2:31:0b:cb:c7:3b:91:2f:24:5d:bf:e0:
                    15:54:a6:ee:10:4b:84:49:d7:6b:f8:fe:52:47:5e:
                    46:ac:f5:a3:2e:60:97:a1:f3:b9:22:bd:ce:2d:56:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:40:0F:67:EC:8C:7E:3B:D9:A5:B0:E1:8C:FC:1C:0A:9F:BD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl

            X509v3 Authority Key Identifier:
                keyid:EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:09:1d:e2:09:49:8c:cb:d9:08:29:3e:69:b1:ed:84:76:
         11:7b:5c:3c:79:2e:fd:1a:c2:74:3d:aa:95:1c:b6:83:c7:0a:
         8a:25:6d:79:d1:e9:ca:0b:c9:25:3a:6e:d5:63:8c:d8:54:fd:
         3f:2a:f9:67:f9:ad:73:4a:34:9c:c1:c3:d3:c2:b3:88:be:0d:
         cd:c2:7f:c8:33:01:2e:12:0a:42:53:ba:9a:69:e3:92:38:20:
         15:9a:0b:f7:7e:d7:8c:c6:60:c1:12:9b:c2:d7:26:78:89:b9:
         9a:0f:e3:23:32:58:1b:09:bb:15:ce:66:bf:ec:6b:4b:d6:e3:
         18:99:3f:e3:60:cf:be:db:f7:5e:1d:bd:18:2d:32:a0:5d:e3:
         de:0a:2c:43:68:bf:ef:4e:ff:af:d3:ef:a7:d7:b8:72:26:43:
         f1:9e:d8:22:81:c1:45:18:51:fe:4f:f6:67:38:fd:1f:78:94:
         91:d9:0f:f8:0c:97:44:4b:7f:12:be:4b:34:a7:83:7d:cd:83:
         c0:60:55:fc:86:47:31:91:2d:7b:04:6e:60:97:3d:85:17:a0:
         5e:2f:d3:9e:4d:53:2c:d0:10:4d:45:9e:58:28:9b:44:12:a2:
         4d:31:9e:f6:b5:a8:4c:76:ab:58:47:e7:8b:89:06:b4:a7:a4:
         8f:e4:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org