Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa
File:                     2246db1e-d55d-35eb-94a8-fe1832072ae4.roa (raw, json)
Hash identifier:          Aluer6MdUD1tsYb36lVOlfxg4/m/6r9Opv3ZuWb5t6E=
Subject key identifier:   C0:39:09:FA:19:B5:11:8B:C3:23:AE:05:82:57:FE:FB:25:48:A7:32
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A17E2A7006DBDF9EE990F0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        96.36.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:7e:2a:70:06:db:df:9e:e9:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d70f9af8-b142-4711-924b-3a262709593b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:8a:01:82:d9:21:6d:78:9f:3c:81:b6:2b:
                    ab:1d:df:44:9d:05:48:13:ab:b6:7b:f2:10:cf:8f:
                    ab:ba:eb:00:61:50:2c:ee:6a:f1:2f:40:04:b9:30:
                    1f:c0:73:31:ce:fb:d1:dc:61:64:ba:58:4c:02:df:
                    26:ab:bf:94:4a:3d:b2:b7:ea:c4:c7:bb:7b:bb:0b:
                    b2:25:07:60:98:fe:58:bc:52:a6:d3:c1:64:1e:54:
                    b7:a6:e8:69:24:30:02:88:b6:54:3a:eb:ba:e9:23:
                    28:df:35:80:fb:25:d5:fe:11:bb:d4:45:d2:16:2e:
                    48:9b:aa:f0:48:3b:dd:00:52:e5:b5:7a:c3:40:1f:
                    0e:9a:c4:e5:61:b6:dd:69:48:ce:dc:4a:91:7f:ac:
                    e4:2a:e9:96:15:bc:a0:d9:04:b7:63:4a:37:41:3b:
                    69:1a:60:54:15:63:2f:ca:3a:78:bf:27:6c:3c:b8:
                    4d:38:75:76:a8:35:8b:aa:ac:d6:4b:8f:e7:7a:17:
                    19:bc:e2:1b:70:8b:0c:11:b6:fb:af:8a:68:74:df:
                    d7:dd:52:2e:4e:37:d8:5c:81:cd:62:55:e3:6a:54:
                    9f:24:44:3d:92:dc:ee:a0:ff:0b:41:3a:cf:f4:87:
                    39:eb:2c:b3:d3:7f:6e:d6:2a:b9:b8:8b:99:3d:68:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:09:FA:19:B5:11:8B:C3:23:AE:05:82:57:FE:FB:25:48:A7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:1e:38:5d:a3:5b:15:ee:32:b3:c2:42:a2:40:13:06:2f:
         12:08:82:4e:d1:a3:2b:8e:cc:64:84:b1:76:88:38:a6:49:bf:
         03:7d:ef:bb:aa:1c:e9:5a:0a:6f:6a:7c:5d:3f:fe:20:e5:31:
         f9:a8:a3:c2:cc:d1:cb:56:f6:78:8e:76:1a:2e:5b:61:bb:31:
         6d:a7:1b:90:ce:23:4f:f2:19:36:55:73:04:b6:2d:07:3e:06:
         47:8f:fa:4f:2a:4b:f9:b5:c6:50:f1:e2:8f:08:d9:77:63:0c:
         00:c4:f3:36:cc:31:fa:33:3d:9f:9b:ab:26:b7:af:e4:b9:8b:
         c3:74:21:67:a0:15:b0:5c:5d:4d:67:c6:14:13:32:dc:2b:34:
         39:9d:40:f4:64:20:8d:d3:f8:db:1c:bb:98:17:0c:c6:5c:5c:
         6a:f4:94:69:2e:43:96:d7:7d:a5:c7:a0:6e:dc:d4:de:ff:cc:
         de:fa:3f:36:1f:b7:0b:16:99:fc:07:5d:21:a5:ba:e4:f0:d9:
         2a:59:25:20:47:38:e3:04:72:db:04:9a:84:f7:e8:ca:d9:cb:
         fd:50:d4:38:52:1a:a4:c5:e3:bf:86:70:a8:ac:9c:41:5a:da:
         ba:dc:bb:6f:db:f2:04:ed:41:c6:c1:48:ca:9a:0b:3f:ce:94:
         66:ff:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:31 2024 by rpki-client on console-ams.rpki-client.org