Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61cf4d92-01ea-32bf-8ee2-cbec4216d02c.roa
File:                     61cf4d92-01ea-32bf-8ee2-cbec4216d02c.roa (raw, json)
Hash identifier:          GsjfqI712cvLvAwnThM+u87pPfm3QgetuTmKYN8W7LQ=
Subject key identifier:   22:3F:53:72:96:B8:40:2C:F8:3F:DC:76:E5:3C:32:90:01:8E:2E:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049BCDEA88875CAFED4C700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61cf4d92-01ea-32bf-8ee2-cbec4216d02c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        96.97.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:bc:de:a8:88:75:ca:fe:d4:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=dcb3948a-5ce2-412c-a6ee-130198b4a960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:c9:b7:41:9a:e8:8a:87:05:67:11:e6:4f:
                    07:e1:33:b2:d4:59:36:17:69:98:97:2f:59:13:12:
                    d7:cc:ce:bc:59:7e:4f:9a:9f:28:9d:ca:67:38:ea:
                    48:ac:3a:83:e7:3d:de:b9:05:00:98:30:0b:64:f9:
                    12:b6:86:c3:8b:f4:e6:96:2f:40:da:7e:25:f1:b9:
                    23:4e:bf:53:56:f9:34:0d:5d:15:e3:b7:e3:93:75:
                    9c:e9:7d:a5:7a:06:32:0a:af:3b:77:54:6f:a0:fa:
                    64:d9:7c:65:e7:b4:68:2f:cf:20:cd:02:0b:ea:bb:
                    7e:1f:45:03:99:ee:cf:b8:97:4e:65:e3:00:76:04:
                    b6:7c:8e:06:5c:03:e0:38:17:f4:a8:34:09:18:98:
                    a4:c8:60:74:55:b6:59:f7:c2:78:82:30:84:8a:61:
                    fa:ff:18:4e:50:98:eb:e5:27:20:04:d1:64:ca:d9:
                    1b:9c:b2:60:83:b7:32:f6:92:d5:82:c0:6b:9f:db:
                    58:a6:c2:3a:47:ae:79:e4:3f:5a:5d:20:06:3d:a8:
                    5b:7b:e7:5e:aa:29:b7:47:92:00:ac:ef:15:6f:4d:
                    a1:1c:c2:c5:47:20:73:e5:a0:a6:1e:67:dc:89:88:
                    44:e2:67:79:f0:ec:56:cb:68:92:c9:8b:96:7d:84:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3F:53:72:96:B8:40:2C:F8:3F:DC:76:E5:3C:32:90:01:8E:2E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61cf4d92-01ea-32bf-8ee2-cbec4216d02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.97.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:1c:fe:33:ab:dd:b4:3f:85:6c:1c:05:62:e1:60:61:44:
         36:af:57:b8:5e:8f:98:b3:aa:23:42:b3:2b:59:2c:30:e4:e4:
         f5:32:ee:86:26:1b:cf:1e:22:38:0d:39:f6:a1:dd:92:c3:7d:
         cb:58:09:b5:8a:b7:b8:04:76:8f:55:88:78:f5:3a:ab:7a:ff:
         f0:68:b0:46:69:13:8d:36:58:13:aa:90:6d:8d:02:9a:ba:0d:
         54:ec:1b:d1:a4:71:f0:12:d5:84:76:70:b2:9e:59:89:33:d2:
         86:c6:93:5f:8d:14:ed:10:24:fb:f4:38:cd:6c:44:49:43:fc:
         1d:44:c5:9d:fd:26:68:29:10:53:33:96:cb:ed:b0:5b:93:d2:
         81:48:8e:ce:26:ee:e9:a6:92:23:54:ff:db:d2:b2:5d:0c:8f:
         9b:2a:36:39:28:64:96:43:b2:aa:bf:03:59:38:a4:e8:4d:76:
         35:82:ab:71:86:ac:b4:aa:6f:7c:bf:fa:32:2e:8e:25:ce:46:
         41:89:0e:90:cc:a5:43:5b:0c:e3:a6:a6:4f:bb:d3:b2:07:2c:
         bd:dd:d5:aa:3e:c9:1c:c6:79:57:4c:7b:6c:2e:b4:78:de:2a:
         8f:a8:2a:ad:70:e7:ec:42:cb:fa:50:77:05:8d:ae:1d:cb:cb:
         1e:31:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:29:57 2024 by rpki-client on console-fra.rpki-client.org