Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9c80ced8-a67e-32e7-b53e-161328db4bc0.roa
File:                     9c80ced8-a67e-32e7-b53e-161328db4bc0.roa (raw, json)
Hash identifier:          WMxElH+renpsDyPs62YXoJYV5AhuInBbumGkRL/fBMo=
Subject key identifier:   46:01:07:5B:74:74:F5:F9:17:5B:33:25:98:90:97:22:06:B3:7B:73
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBA9B4EEFE80A94CA99800
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9c80ced8-a67e-32e7-b53e-161328db4bc0.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        76.77.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a9:b4:ee:fe:80:a9:4c:a9:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=20995bb4-56d7-41d7-ac33-f93222a616ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:29:ce:8f:a9:d6:ee:90:1d:71:9a:ec:34:
                    2f:34:00:70:f4:13:b0:93:91:74:c7:76:52:23:0e:
                    1a:cb:31:9f:ba:6c:af:c6:6c:e8:d4:1d:99:cf:14:
                    41:4a:ba:af:40:91:dc:df:2e:e9:7e:f1:00:7f:87:
                    c5:37:e8:9b:af:89:19:be:77:8f:e5:ed:23:ee:80:
                    c9:b9:a3:e2:ac:7f:92:05:07:d5:20:c0:40:3a:3a:
                    e0:79:73:89:de:ca:bf:b5:c3:68:95:c3:12:40:0a:
                    f1:50:df:f1:33:45:02:dd:37:b1:7c:9e:38:85:0e:
                    eb:12:4d:b4:20:af:9a:da:ab:66:65:27:b2:36:14:
                    5d:a6:eb:93:04:a5:73:37:23:6f:1e:2b:99:41:bd:
                    b1:8b:c4:89:eb:26:fd:69:8e:72:ab:63:5a:87:d3:
                    2c:21:fa:ed:97:1b:6b:55:39:80:a9:50:db:1c:4e:
                    f3:74:59:d0:67:64:fc:e5:99:05:ee:c1:54:f3:11:
                    b1:17:8b:48:b7:53:5b:03:0b:7c:01:93:5c:82:4d:
                    b2:44:65:cb:30:a5:b6:3d:72:36:69:3c:e4:58:ce:
                    db:78:82:b8:2c:3d:22:53:5f:f7:ba:6f:02:be:b4:
                    50:a8:c6:cb:74:21:27:52:ba:06:5b:0c:d3:9c:52:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:07:5B:74:74:F5:F9:17:5B:33:25:98:90:97:22:06:B3:7B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9c80ced8-a67e-32e7-b53e-161328db4bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:51:a9:55:7d:c5:62:e7:b5:41:ad:98:ae:74:e0:ea:4c:ed:
         df:65:8a:08:11:32:b3:4b:e9:c0:a8:b7:72:21:71:8d:e2:1f:
         b5:81:9b:b2:f6:f1:dc:e0:a9:20:49:db:28:bb:4b:cd:51:bf:
         7f:2e:69:6d:3d:c7:26:91:5d:37:9d:23:77:c6:00:ed:49:d0:
         f4:c1:56:0b:ad:b5:9c:7a:cf:8c:54:f5:00:0c:63:db:b8:1d:
         ee:c3:49:0a:c9:95:22:81:dd:aa:bf:93:66:46:c8:40:d0:77:
         33:00:9c:1f:f6:fa:51:dc:21:7e:cb:c8:39:44:39:69:4d:5d:
         56:da:93:d3:fb:d8:ed:5e:81:e1:35:65:08:6a:5e:e3:4a:50:
         7e:2b:3e:59:b2:cd:8e:a7:6e:31:99:5e:94:c5:a0:12:12:0f:
         db:56:a3:ef:36:b9:98:fa:f4:4e:34:1f:24:5c:a6:55:98:59:
         00:b9:14:9a:a3:1b:53:f0:e0:7a:82:98:1b:9c:02:32:46:28:
         8e:a6:db:13:fa:00:32:30:fe:92:68:07:e5:cf:6b:c4:35:77:
         23:69:ed:9d:2b:b8:ab:1c:a6:e5:39:d7:d2:42:e4:9c:23:1c:
         a9:e1:be:f8:3b:83:71:f7:e6:4c:f6:66:d2:eb:5c:11:80:ea:
         ec:7a:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:21 2024 by rpki-client on console-ams.rpki-client.org