Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa
File:                     4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa (raw, json)
Hash identifier:          wsmk4Kpnvi2S15YTfFI9LxRFmH3qZqTuh2+1ns/8scM=
Subject key identifier:   83:FB:F3:B8:8D:02:29:C8:FC:AD:75:4E:1E:1F:36:95:CC:2A:00:F9
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F4328584742BB3EA5DB687953B26CFF00
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     11260
IP address blocks:        67.213.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3e:a5:db:68:79:53:b2:6c:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=0c4d322b-4409-4f59-9199-42640b062d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:ba:da:77:9d:9a:32:d1:de:ff:ab:35:61:
                    d3:bc:86:30:32:0b:85:d0:7a:dd:b8:f2:82:83:4b:
                    7d:09:e0:a0:58:a6:29:fa:1d:ad:b7:04:4e:07:c6:
                    75:5b:5a:69:8a:0d:ea:fd:a4:e7:ca:c5:f9:2e:c6:
                    5c:cb:c0:23:42:0f:b7:f3:6c:d8:5c:13:29:14:c0:
                    2b:a5:47:b8:dd:0a:a2:6f:b6:9b:cc:32:91:8a:f2:
                    4a:a0:c8:f2:3b:10:e3:72:16:60:4b:b2:fe:64:0e:
                    5f:2f:1a:64:cc:c1:c3:98:ca:64:22:9e:a1:82:ab:
                    5e:89:bd:db:78:a1:4f:ed:8f:1f:3e:ab:ef:cd:fa:
                    c8:e6:f0:33:ad:d2:2e:67:be:ad:a9:92:41:3e:88:
                    c0:48:d4:a9:b2:ba:dd:41:1a:c9:d7:3d:cc:81:5d:
                    d5:93:96:f3:b5:f4:09:ce:e7:01:7a:96:00:85:fc:
                    ff:dc:2f:a3:fe:02:1b:c1:61:5d:91:7d:39:52:f5:
                    11:4e:f8:2f:cb:e9:ce:d0:ec:5b:b5:99:ff:3d:3f:
                    6b:37:a9:c5:f3:d2:30:32:47:d5:60:f1:c3:54:d6:
                    66:98:4b:36:5b:48:97:55:4a:39:26:95:cf:41:1f:
                    98:4a:d2:9c:a5:45:99:21:3c:2c:5f:4e:76:bc:33:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:F3:B8:8D:02:29:C8:FC:AD:75:4E:1E:1F:36:95:CC:2A:00:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:74:39:12:bf:d7:2c:78:b9:5c:65:71:04:bf:f6:7a:79:
         f9:29:51:81:2c:b3:ed:80:db:0a:65:04:c9:ad:5f:ce:91:18:
         cc:71:44:83:9d:87:f8:f3:84:af:68:d0:5e:2f:26:e6:58:bb:
         95:cc:b8:ec:be:08:d9:67:62:85:99:e4:96:86:ae:01:d7:20:
         a1:9d:ee:ae:34:c3:0d:ae:b9:28:02:52:80:13:d5:1f:b9:86:
         e3:b4:b3:d6:b2:8c:61:4e:5d:35:93:19:23:b8:26:b1:7c:76:
         28:37:7c:19:22:bf:09:ec:40:e4:6b:93:1c:3a:f6:82:fd:aa:
         a1:d8:fd:fa:2c:ce:90:86:d5:a6:ad:95:71:22:de:a6:1e:29:
         59:aa:de:dd:6e:88:5e:ba:82:db:13:99:34:70:6c:27:ba:29:
         24:3f:8e:e1:0c:b1:6c:d9:36:85:50:a8:4a:66:54:4f:c6:b8:
         41:de:29:4e:f0:bd:05:79:41:de:a5:1e:2b:91:74:85:18:5e:
         03:dc:48:0c:d1:b9:95:56:37:b8:e8:6e:1b:fa:9b:81:51:38:
         4c:07:32:c5:b3:cd:79:d8:c4:1a:60:d1:e0:9a:9b:52:60:7f:
         47:02:7d:44:9e:8c:7a:f7:4e:3a:7d:b3:10:2a:8e:4d:3e:e9:
         14:98:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org