Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d542fda-8a73-3dbd-9f07-fb508f54283a.roa
File:                     4d542fda-8a73-3dbd-9f07-fb508f54283a.roa (raw, json)
Hash identifier:          TS7hp/i+0JdLWHsDnI88epth5rUuoKHAMocsCbaqi7w=
Subject key identifier:   4A:C1:6A:A6:BD:86:4B:64:5F:85:0D:DA:04:EB:DF:06:26:2B:4E:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0FCEF19EB3DA84BF21940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d542fda-8a73-3dbd-9f07-fb508f54283a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        96.36.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:fc:ef:19:eb:3d:a8:4b:f2:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=daae79ea-b5c7-407d-80e0-61a018c75018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:f3:f5:ab:6e:ab:83:1a:0c:eb:b7:63:ff:
                    aa:72:5f:3a:0b:de:29:7f:3e:ef:a3:34:e8:b6:40:
                    58:29:13:59:e5:4b:da:3d:d5:d5:25:1f:24:b8:6e:
                    9c:71:fe:83:ec:8d:ef:30:19:ea:44:47:e0:94:00:
                    ee:14:15:eb:e2:fe:5f:20:77:e5:eb:ac:bb:99:4d:
                    40:3c:f5:83:8f:58:3a:f6:97:03:d5:df:0c:47:a1:
                    c8:72:10:41:bf:66:c9:83:86:a2:18:55:96:51:74:
                    66:27:f0:f8:3f:66:9d:11:85:80:2e:64:33:b3:0d:
                    e3:3c:6d:2c:27:42:c9:7a:2c:ec:d2:81:87:00:40:
                    a2:5c:39:df:ef:92:6d:e0:53:e3:17:c4:3c:c7:71:
                    e5:04:02:02:de:fe:ce:37:26:18:c2:2c:0c:6f:23:
                    49:14:1b:5d:03:c4:6d:42:1c:7b:f3:68:f5:56:ef:
                    31:6b:f6:3b:c5:2b:68:7c:f6:a0:7e:b5:ab:25:64:
                    2c:88:8d:d2:ed:0b:c2:33:dd:8d:34:72:a0:15:e3:
                    4b:8c:30:3e:53:bb:35:d0:a0:44:0d:e7:5f:64:60:
                    b7:02:bf:de:3c:43:b7:1f:80:18:ed:97:f4:c3:d8:
                    0f:8a:b2:2b:1e:53:74:33:56:e8:9e:bf:60:cf:20:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:6A:A6:BD:86:4B:64:5F:85:0D:DA:04:EB:DF:06:26:2B:4E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d542fda-8a73-3dbd-9f07-fb508f54283a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:f6:fb:1f:0a:d3:2d:54:2c:59:a2:fb:ea:63:1f:53:6b:
         6d:d1:44:69:f1:6e:88:60:cf:1b:fc:1c:9e:99:fd:6c:73:79:
         37:99:71:52:84:bc:2f:71:d4:8f:01:c3:8c:65:dd:25:72:4b:
         3e:b9:5a:79:c9:6a:19:15:13:93:f1:94:87:82:07:56:b6:69:
         d2:8a:96:21:a1:2e:b5:33:0b:40:30:bf:6e:63:29:9f:88:bb:
         b4:ba:f5:de:96:a1:36:57:51:21:e5:7f:e9:51:b6:21:37:b9:
         78:a9:2e:24:7c:ca:7f:31:90:29:8d:09:92:44:67:ec:7e:96:
         33:f3:0a:a1:50:6f:47:fa:56:7d:ab:70:b5:9a:35:80:e9:e0:
         26:54:50:dc:b9:d0:2d:48:ed:3c:85:19:5b:76:11:5c:65:a4:
         72:7b:69:db:f6:eb:5e:37:c5:6b:8d:91:5f:64:7d:83:fd:98:
         3c:47:c4:84:72:2e:22:a3:ab:42:6f:08:bd:5c:8b:96:b6:07:
         f3:94:43:d0:99:ec:10:e8:4f:f0:88:9c:01:03:c5:89:f3:32:
         f4:77:b4:af:83:2f:e3:7b:15:1a:f3:61:18:60:ec:56:75:9e:
         27:27:92:c2:b1:e4:76:47:1a:f2:94:77:91:36:fe:c0:dd:86:
         38:86:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:35 2024 by rpki-client on console-ams.rpki-client.org