Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b2f650-1e18-3fd1-9d65-4b7b9fe9f32d.roa
File:                     a4b2f650-1e18-3fd1-9d65-4b7b9fe9f32d.roa (raw, json)
Hash identifier:          3zkEy+q/PSzgLgTJza4LhEhnGQ3wQbl8vcgL9HMeV94=
Subject key identifier:   8F:7A:EA:99:81:87:DE:A1:8C:E3:E6:9A:1B:68:E3:2F:BB:5F:53:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004998800F0B9CF6AE8BC480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b2f650-1e18-3fd1-9d65-4b7b9fe9f32d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        67.165.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:98:80:0f:0b:9c:f6:ae:8b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=92b2c18d-ef79-4873-af1b-c174fe2cc6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:5a:c1:11:ce:89:bf:0d:70:4b:22:df:8c:
                    b6:cf:44:80:5b:80:88:56:c0:db:9e:54:9d:2c:15:
                    80:30:5f:91:74:20:03:84:dd:25:c3:4c:0e:1c:b7:
                    b1:ad:fc:bc:f1:37:ca:2f:a6:c4:77:69:2a:cb:d3:
                    0f:11:e8:31:e9:07:fa:77:4d:56:9f:a4:b4:5a:a9:
                    2f:2e:9b:40:d5:0a:e0:c5:8d:38:85:f5:81:e9:34:
                    a5:e7:b9:4d:a0:12:49:6f:47:7e:92:6b:62:bb:c5:
                    db:31:40:3d:a5:1f:dc:84:f2:21:06:cd:59:08:8f:
                    94:49:2b:93:b2:0b:4e:e5:39:ad:c6:2a:9a:8c:36:
                    9b:5a:da:21:7f:bc:be:29:42:f2:10:d6:c1:f6:76:
                    1e:cf:c3:2e:88:18:df:ed:0d:cd:c5:dc:50:b6:34:
                    2c:ba:a8:c0:8b:bb:fb:cc:12:96:f3:1c:63:32:2c:
                    42:c9:4a:eb:54:85:67:72:cb:82:78:1c:cd:c9:99:
                    0a:92:b0:e6:47:bc:4a:6a:66:ae:18:35:13:10:62:
                    31:99:db:7c:42:af:c8:b1:9f:9b:b9:37:b4:7b:c0:
                    d6:91:3b:a9:0b:6f:9a:38:5e:15:44:c0:f6:e8:d8:
                    13:b4:9c:1f:f0:74:30:82:4f:97:3d:c4:c0:4f:62:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7A:EA:99:81:87:DE:A1:8C:E3:E6:9A:1B:68:E3:2F:BB:5F:53:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b2f650-1e18-3fd1-9d65-4b7b9fe9f32d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.165.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:0e:1d:30:7d:34:c6:fc:b1:43:88:a7:0c:4e:19:46:95:
         26:86:06:67:54:e5:a3:65:d3:7d:5a:91:00:fa:d2:b1:9e:73:
         d0:a5:dc:c0:c6:b4:6b:41:2f:ae:c7:48:7e:99:c1:a1:b6:e0:
         a8:09:a1:0a:49:4d:ce:1d:23:d2:22:c0:98:fa:57:94:34:9b:
         23:53:51:09:a0:7c:b9:11:46:f4:24:25:92:ba:72:5d:ed:d5:
         39:ea:05:7f:24:03:2b:26:3d:01:e3:af:c7:5f:de:58:36:89:
         a2:68:7a:47:54:e4:0c:38:51:f0:f1:51:69:f7:ea:8e:c0:a7:
         40:20:cc:80:f1:29:b0:b1:ad:e1:12:55:84:e6:a2:01:d9:18:
         ec:ec:56:44:42:1e:63:09:07:a7:85:6f:e6:90:2c:b9:9a:c2:
         55:0b:66:09:58:1e:02:ed:fe:10:b0:28:40:b8:58:a7:80:b7:
         3e:65:70:98:7e:a7:bb:11:12:6a:83:3f:c3:6d:02:7b:5b:eb:
         06:fe:74:1c:1e:40:5d:e2:3f:fb:d9:f2:49:4c:70:6c:0e:ff:
         32:0f:b8:31:cb:73:73:ca:c1:92:14:ef:3a:bb:d2:af:71:8c:
         bc:aa:44:90:62:38:d6:42:60:49:13:ba:b9:2f:80:01:c0:3b:
         3e:5f:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:09:59 2024 by rpki-client on console-ams.rpki-client.org