Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
File:                     01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa (raw, json)
Hash identifier:          rzjSL86wOKiRe2FJSbFTN/abzm7J0gankkux1K8k/zU=
Subject key identifier:   99:ED:D1:FC:05:FA:00:46:C9:1C:66:53:BF:DD:C0:56:32:8F:60:6B
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F432858472DCB325A009BCF8EFCBC8BA0
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
Signing time:             Wed 11 Sep 2024 13:00:42 +0000
ROA not before:           Wed 11 Sep 2024 13:00:42 +0000
ROA not after:            Tue 10 Dec 2024 14:00:42 +0000
asID:                     399337
IP address blocks:        209.151.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2d:cb:32:5a:00:9b:cf:8e:fc:bc:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Sep 11 13:00:42 2024 GMT
            Not After : Dec 10 14:00:42 2024 GMT
        Subject: CN=85a14209-1f16-47e1-89ee-f0a68ef3a672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:69:5f:f8:d3:dd:92:7d:cd:54:ac:36:55:
                    5a:85:ea:d7:cf:be:25:73:31:50:1d:5b:e6:f3:35:
                    b8:ed:0a:00:a2:78:bc:12:ec:31:94:34:7c:bf:63:
                    72:e2:37:62:af:71:ca:86:d5:87:b0:69:d7:3e:b3:
                    1f:6e:14:5c:4e:3f:d8:52:bc:9f:ee:9a:f2:fc:d6:
                    96:37:96:c7:7a:02:65:72:da:f7:dc:eb:ea:b9:8c:
                    a9:46:c1:39:24:bf:7a:a6:1b:6f:c3:d2:79:81:d4:
                    a2:91:67:e1:c2:63:95:da:60:07:72:36:b5:60:da:
                    30:e6:c4:7e:2f:09:f7:06:f3:b2:31:95:00:a6:e4:
                    68:88:20:50:12:a8:9f:90:4a:08:b1:3c:bd:db:b2:
                    5b:2b:a5:99:32:4e:28:42:18:9a:16:26:8b:6c:11:
                    23:9c:6b:c5:51:5f:0b:d3:49:bc:98:b6:e7:1e:22:
                    85:ee:a7:ff:27:48:64:4b:94:5a:9e:1b:dc:b4:32:
                    70:47:9e:7f:37:f8:69:83:26:1b:eb:a1:3e:f9:a5:
                    2b:ae:a5:4d:e2:b4:b2:5a:55:48:c5:c5:e5:9c:dc:
                    df:52:12:8b:1d:40:04:9c:9c:77:ea:b4:10:e8:83:
                    68:50:4f:bc:1d:1c:94:97:89:3f:79:10:37:16:5f:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:ED:D1:FC:05:FA:00:46:C9:1C:66:53:BF:DD:C0:56:32:8F:60:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:02:15:62:7a:89:53:14:1e:91:ef:f4:f5:e6:f1:5f:5b:
         6f:11:7e:67:1d:5d:29:96:1c:ff:ef:23:6d:4f:6f:a1:eb:77:
         aa:f4:72:56:7d:01:9c:75:2d:fa:a1:62:8a:bb:30:6c:65:91:
         aa:ec:18:e4:df:d1:1c:7e:5d:16:d1:58:b2:9e:eb:97:b1:68:
         d5:b2:73:14:a7:07:9a:ff:05:f6:66:56:f7:ac:06:cf:41:d5:
         1c:c6:8c:ad:9a:c3:27:f7:f5:6c:f9:b2:9e:68:c4:e1:23:3f:
         ec:d6:36:86:f0:d7:8a:2a:c0:33:f7:b6:ca:23:ed:3f:13:05:
         82:41:25:71:e7:55:9e:1d:6d:61:7c:a2:b3:4d:a0:3d:73:7b:
         c6:58:12:5d:06:06:12:30:9d:af:8c:7d:6c:c4:52:a6:f4:24:
         b2:88:00:ad:3f:6a:2d:1d:63:7c:e5:4e:7c:4e:85:82:4d:0e:
         32:38:ec:f1:87:55:ec:e3:b5:9a:17:7f:25:ef:5d:0b:70:6b:
         b4:1b:09:42:12:fb:11:b7:1f:74:5e:4a:e8:3d:e9:e4:3d:04:
         32:95:ab:dc:21:cc:89:8b:02:e2:52:00:da:e0:4e:dd:3c:e4:
         c3:1b:43:45:9e:3d:0d:c1:ae:ed:c4:b7:3f:17:a6:45:a7:03:
         3f:b3:e6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:29 2024 by rpki-client on console-fra.rpki-client.org