Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c896578-c22c-3b3e-8245-c626771e0f01.roa
File:                     3c896578-c22c-3b3e-8245-c626771e0f01.roa (raw, json)
Hash identifier:          mOxzVa//Pz4nstRjjDwd5E7aaGurL/3i2ma6wnb3ko8=
Subject key identifier:   86:02:AD:D2:53:A0:A8:C8:17:24:9F:AF:22:69:DA:44:D4:DD:80:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049CCA319050A295ABE5240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c896578-c22c-3b3e-8245-c626771e0f01.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22258
IP address blocks:        96.114.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:cc:a3:19:05:0a:29:5a:be:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e98012d9-c2b8-46ef-83f4-87d0809c053f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:4c:ab:b1:9c:af:cc:85:28:4b:e6:6c:ee:
                    39:3d:ad:93:e0:1e:4a:0f:e2:ac:6c:7e:b8:45:fb:
                    0b:d2:75:88:0e:86:71:53:cf:28:db:6e:9d:57:84:
                    00:fa:4d:54:99:71:52:0a:bd:b7:94:2d:c0:c8:ed:
                    2d:50:8a:b3:51:f5:ff:55:91:e5:b1:04:3a:e3:12:
                    1b:6e:ca:a7:c8:26:7b:69:70:c6:e0:41:80:52:0e:
                    29:74:f9:2b:fb:1c:0e:b0:4c:75:81:45:d0:77:6d:
                    c5:3e:48:f1:d9:3a:a8:28:b9:40:15:31:0d:6a:bd:
                    13:b5:63:ea:3b:7b:89:78:de:aa:2d:98:df:14:cf:
                    62:a4:1d:c9:af:45:b0:01:40:ea:1a:df:35:4a:b5:
                    a1:a9:09:a7:8d:30:df:16:3a:4b:cc:84:0d:bb:ca:
                    d1:d7:47:e8:ef:16:67:ad:21:78:d2:e3:f2:2a:10:
                    8b:1b:5c:64:60:fa:d2:e5:44:0b:13:fa:23:84:36:
                    cf:9e:f3:1d:2c:59:48:5d:62:2a:c7:48:92:63:8a:
                    13:e0:de:35:eb:14:8a:82:ba:4f:7c:96:33:c6:e8:
                    e3:6a:31:97:b8:66:32:13:fa:d7:27:b1:f7:82:39:
                    a6:63:40:7b:a6:7c:ce:35:ce:41:80:cb:c9:80:af:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:02:AD:D2:53:A0:A8:C8:17:24:9F:AF:22:69:DA:44:D4:DD:80:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c896578-c22c-3b3e-8245-c626771e0f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:dd:b8:59:71:96:d1:c2:65:7e:79:37:56:93:f1:b1:72:
         52:06:42:6e:8c:78:7a:08:44:02:3f:98:98:9c:1f:08:8a:38:
         97:cf:34:6e:f3:8c:e0:d8:8e:f1:b3:4e:f7:d6:db:15:c7:49:
         cd:32:6e:c8:cf:7a:e5:96:4e:e4:3c:72:d7:f2:bf:40:b7:8c:
         01:9b:14:b2:49:62:2e:86:77:09:e5:0c:48:d6:23:c5:d0:5b:
         03:e3:1d:b0:7b:e9:55:d2:49:65:6d:26:91:f6:e5:53:69:bb:
         0f:ea:6f:8a:da:92:2a:f1:c9:30:b4:c6:84:72:3e:6c:2e:0a:
         9e:70:c1:15:2a:4e:f7:60:f0:83:30:fa:08:30:52:57:cc:c9:
         2c:d6:e2:29:56:dd:60:b8:6b:58:f0:a7:c0:94:a4:fd:18:f2:
         8b:e5:23:34:57:74:b8:d9:dc:57:7a:ca:40:de:41:32:4b:6a:
         5f:19:50:cc:3c:aa:82:2e:7a:08:f4:3d:12:52:6d:74:c3:c5:
         84:68:96:08:81:0e:f1:98:8b:a7:a9:e3:75:ff:67:87:a6:5d:
         52:18:66:05:fd:35:8e:54:a0:28:95:11:a5:72:96:cc:75:ba:
         75:aa:57:41:5a:26:88:ee:23:86:a7:d3:74:6b:b3:1e:48:0d:
         06:1e:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:30:08 2024 by rpki-client on console-ams.rpki-client.org