Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bd47af4-c7f0-3ff7-9bab-32c8ff818f62.roa
File:                     0bd47af4-c7f0-3ff7-9bab-32c8ff818f62.roa (raw, json)
Hash identifier:          jTCsq6fiLAGHN6woQv6PASBYnmkllHC5T7IAYJIdgTg=
Subject key identifier:   58:03:B9:F0:6B:ED:48:D6:FF:57:AF:40:4F:1E:0C:F4:80:DC:51:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A7C7F88C8DDA3C8CFFB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bd47af4-c7f0-3ff7-9bab-32c8ff818f62.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        96.220.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:7c:7f:88:c8:dd:a3:c8:cf:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=976d6b8c-2f52-4eb8-a2ef-be1e4f9eef43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:c2:bd:34:a7:64:56:61:68:8a:fa:b7:08:
                    4e:9a:4a:f1:5f:1c:3a:21:93:e5:55:28:26:9a:04:
                    77:35:c8:73:0e:58:9d:fc:b8:a6:0d:17:31:a2:55:
                    20:f2:99:8f:4e:88:7a:44:14:f1:c0:ff:1d:21:b9:
                    3b:e0:7b:ec:ac:b4:3e:9a:20:3a:2f:71:3d:83:4b:
                    cd:6f:20:2d:9e:86:46:23:3c:df:57:ad:74:b0:71:
                    56:7e:51:cc:55:87:85:e5:48:12:74:b1:6d:6b:0d:
                    99:bf:d1:09:78:ba:ee:4f:e9:9e:83:2c:69:8a:02:
                    17:24:87:e1:7c:a2:7d:aa:e7:e5:4e:87:66:fa:9a:
                    db:c2:ef:7a:93:4a:25:af:3f:ec:12:6f:a8:2f:d3:
                    52:e7:6c:c1:0f:56:47:31:3f:fe:83:1e:f8:68:4c:
                    a8:d3:8d:1e:24:f0:ed:42:7b:d5:3e:d4:e9:09:4a:
                    ee:e5:82:5f:13:cc:60:eb:ee:7c:cd:c0:05:08:44:
                    24:6f:f6:07:b3:27:82:9d:4c:cc:c1:85:ef:67:78:
                    a1:ec:75:f4:d6:ae:d7:da:79:1b:8d:8e:5d:9d:bf:
                    1a:76:d3:6e:2b:29:8f:a0:42:85:c0:f4:d2:a5:16:
                    94:e0:04:bf:21:7e:dc:da:e4:7f:3a:90:22:9e:e7:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:03:B9:F0:6B:ED:48:D6:FF:57:AF:40:4F:1E:0C:F4:80:DC:51:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bd47af4-c7f0-3ff7-9bab-32c8ff818f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.220.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:02:05:38:cb:b8:4e:78:d2:5e:66:6f:cf:4c:a1:f4:12:
         5c:d4:24:30:3f:11:2b:a8:fe:3f:d3:03:f1:78:2f:e8:ec:cd:
         6d:6b:65:d2:ef:f1:37:89:73:49:1a:46:9d:ea:1b:61:57:a0:
         b8:da:3d:6f:6a:79:7f:98:c5:69:d3:94:66:5c:bf:a8:50:12:
         09:75:ba:1c:fb:55:7e:17:e9:75:a3:7e:db:9f:5e:3f:84:f2:
         4f:f0:85:d1:fe:9d:84:1a:3c:9c:43:99:61:51:99:b2:af:10:
         0a:d9:db:59:55:52:53:e4:9c:af:58:ab:13:d7:8d:91:34:30:
         60:4b:ee:cd:69:3e:51:a4:82:52:9c:df:2b:e8:e3:e3:92:f3:
         80:37:f5:f9:f5:e5:da:e1:1c:b2:0f:4a:b2:5e:52:43:89:d0:
         51:0b:af:5f:b4:ca:1d:cf:7c:0a:ab:0c:cb:58:f3:9f:73:3a:
         23:d5:1d:b3:f7:12:8c:ac:d0:3f:e1:7b:6c:52:2b:3d:a3:d2:
         69:28:bf:fa:00:13:07:dc:43:ad:10:21:ba:0f:49:75:0c:88:
         6d:69:0f:1c:fd:27:c3:a6:dd:91:93:1c:aa:55:b6:07:b1:60:
         fd:84:68:92:6b:f6:d9:83:90:93:50:4f:23:61:26:3c:29:7c:
         d3:ce:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:28:25 2024 by rpki-client on console-ams.rpki-client.org