Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa
File:                     8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa (raw, json)
Hash identifier:          tGvp+RCzhNSNf3k/W42/FExpi+Xs2RVtF7OQA72JWjk=
Subject key identifier:   CB:C6:ED:B9:A6:3A:C0:5C:07:44:DE:B9:E8:4C:24:6F:24:51:3C:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A17DFE88ABB88A84926920
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        96.36.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:7d:fe:88:ab:b8:8a:84:92:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4fa41e28-b949-4f41-ab8e-cead9fcca0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:89:ad:dc:94:5d:d7:ae:5d:0c:82:ae:44:
                    67:de:77:5b:87:50:8a:e9:fb:83:9c:2e:5d:00:cd:
                    31:20:eb:99:10:79:6a:57:2c:21:66:d1:f0:57:f5:
                    29:40:f5:8a:49:ee:70:f0:c9:ff:cd:16:cb:4d:dc:
                    a3:bf:fd:35:96:0d:54:40:c3:48:f2:84:0e:8b:a4:
                    16:d4:97:7b:27:5f:51:a4:b7:71:58:11:e8:c8:1d:
                    21:49:25:dc:d1:76:d8:80:b3:02:0d:25:a2:90:d3:
                    df:87:8a:85:de:1c:0b:1e:80:63:ad:8a:62:ee:b7:
                    77:b2:71:fb:d4:6c:28:21:30:6d:82:98:79:8e:2b:
                    25:af:90:a0:06:fd:68:47:fd:d3:6f:29:25:c5:ea:
                    fc:c1:0b:44:7e:03:f8:73:b2:95:1d:35:af:be:af:
                    5b:82:98:15:18:4e:aa:a6:d1:15:b1:bd:04:03:c0:
                    e5:4d:46:26:02:73:1f:b2:fc:8a:58:e6:da:a2:4a:
                    42:45:3b:0e:87:d3:58:a5:bd:a2:ff:4a:49:2a:e3:
                    fd:f1:72:64:31:f3:46:4e:0e:b0:56:b6:87:e5:25:
                    07:4a:21:9a:1c:f3:e8:02:a4:5d:6e:f0:bb:92:54:
                    72:9a:ed:54:1b:38:8b:56:0e:cb:e5:31:da:9b:4d:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:ED:B9:A6:3A:C0:5C:07:44:DE:B9:E8:4C:24:6F:24:51:3C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:0e:69:00:c9:65:b8:77:2b:92:01:cf:47:45:35:3b:19:
         ea:c8:37:8d:1c:b7:8a:b7:9c:c8:13:83:5f:e6:40:ef:4c:b1:
         85:aa:55:26:9a:fe:f1:1e:a4:6d:ff:a4:62:5f:02:53:8a:a1:
         34:2a:13:47:fd:cb:e3:99:dc:54:71:19:a8:8d:2c:d1:ed:f7:
         39:8d:38:dd:2d:85:41:ef:4f:02:24:c8:e0:cb:da:f0:17:2c:
         c7:d6:39:a9:f5:1d:01:83:dc:0f:e9:62:a1:85:4e:e4:40:9d:
         4d:cc:de:cc:0b:26:ac:26:76:3c:63:70:6d:23:e9:61:cc:86:
         18:00:a7:ce:c4:fe:eb:2f:86:c3:39:32:7d:78:a6:05:b2:87:
         b1:d7:8f:69:82:7f:c4:22:f6:6b:63:a7:1b:0d:b0:29:98:b1:
         77:a8:d8:e0:2c:40:2f:72:bd:c1:54:dc:b3:51:b4:83:ed:41:
         1e:ea:c9:33:ba:34:8f:4c:77:de:fa:d1:15:4f:ea:9e:9c:f0:
         22:40:84:7a:24:14:48:ed:61:5a:50:ca:cf:96:ea:3d:fe:7b:
         c0:5b:b2:bc:f2:a8:54:8c:5c:cf:ce:a6:d5:e8:f2:70:06:02:
         b8:5a:9c:54:94:89:9d:c8:e8:67:59:02:52:2c:9f:8e:ee:e5:
         12:ca:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:14 2024 by rpki-client on console-fra.rpki-client.org