Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa
File:                     36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa (raw, json)
Hash identifier:          MU4R/tSsHcfO1cBUK2zWHVBUWTbQepo9HxOzsL/ZNQg=
Subject key identifier:   0D:67:8E:89:DB:D1:94:FF:94:1A:10:31:23:13:45:A2:23:0E:A9:95
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155329164C37D4917784E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        76.9.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:32:91:64:c3:7d:49:17:78:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=b9c900a8-d4fa-4745-b878-8b47b2687834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:49:79:5e:07:8f:1b:b2:f0:44:b4:ac:8d:
                    9b:40:32:52:a9:da:e5:77:2d:0a:2a:e7:69:9f:b7:
                    b7:6b:3e:5b:5f:02:b4:6f:6a:64:e4:d6:15:81:08:
                    02:7d:0b:6c:3d:03:ca:d8:dc:d1:29:f5:51:d1:ae:
                    71:0b:e0:e1:0e:01:f0:6f:e6:bd:03:90:50:59:d8:
                    c3:22:b8:6e:80:ef:3c:e0:93:f0:5c:0f:6e:d1:a4:
                    cf:f9:dc:8c:b7:b1:d5:64:48:6b:5e:bd:c5:3b:02:
                    85:58:7c:e0:f0:1f:87:e5:71:1d:4b:2b:78:ac:30:
                    1b:1d:e6:87:57:a8:26:80:9e:5d:71:f7:00:e7:ff:
                    a3:d8:88:c7:88:a1:94:3d:cc:3e:f7:63:10:b5:81:
                    6e:7b:28:29:d7:b2:c1:9f:b7:c3:0d:52:07:a8:a1:
                    f1:65:42:fc:09:8f:5c:55:15:6a:7d:09:54:7c:9a:
                    8b:bf:79:3f:92:58:6b:a9:6e:14:f8:32:c2:ff:50:
                    15:75:a9:fe:5d:49:b1:17:c4:7f:5d:ee:83:2c:72:
                    8b:a6:10:12:34:b6:ff:c6:41:48:ae:ad:6b:03:a6:
                    52:d9:65:a7:f4:05:25:57:4e:11:32:0b:e7:c6:29:
                    61:e3:e1:ff:4d:5c:0f:e0:91:48:bb:62:49:44:33:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:67:8E:89:DB:D1:94:FF:94:1A:10:31:23:13:45:A2:23:0E:A9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:17:f8:de:bf:84:bd:d0:1e:8d:b3:60:a9:fa:21:7d:17:
         a5:42:b8:85:36:07:45:aa:a7:13:6d:2b:cb:e3:36:63:64:40:
         bf:b8:7e:bb:2c:09:7a:a9:dc:24:75:1e:44:dd:a9:af:6e:04:
         f5:5c:62:f5:e5:7f:5e:35:1e:83:7f:d0:0f:2c:54:0c:20:93:
         d2:f0:1b:6e:13:ad:e7:de:a1:64:0d:5b:12:27:41:36:3b:27:
         2c:f9:4d:85:c3:a9:96:e9:21:a0:d5:89:e7:3f:76:af:ea:e2:
         28:7e:7a:9b:ac:91:53:f5:ba:3d:5d:8a:ea:17:26:cd:c1:bb:
         e3:da:8f:83:f6:36:dc:7f:a9:68:1c:fd:37:65:d9:33:15:94:
         96:ac:5e:df:9f:9e:11:8a:14:c6:3b:a6:cf:88:e4:a0:57:cd:
         9f:82:fa:51:ad:12:02:80:4d:2b:1d:c3:aa:a9:da:91:0c:5d:
         a6:88:5b:71:6d:7b:0b:5a:24:c9:51:f6:37:23:9d:06:d9:19:
         5c:e6:b1:8f:22:da:bf:b9:16:60:12:cc:7f:cb:bd:9d:a2:4b:
         05:55:3a:01:68:7a:85:eb:8f:b1:e8:78:f4:51:ad:9d:ce:8a:
         54:69:b8:0d:11:9d:06:ee:59:e4:d9:d3:ed:76:aa:72:18:d0:
         1c:73:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:28 2024 by rpki-client on console-ams.rpki-client.org