Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceccf0be-b97a-38bb-a3eb-041cfb0cfd21.roa
File:                     ceccf0be-b97a-38bb-a3eb-041cfb0cfd21.roa (raw, json)
Hash identifier:          y0B1k9bXGcx/YVTDJIAov+Buqx9zm6wOz6i0eU0rSos=
Subject key identifier:   64:07:76:FB:88:0C:50:27:11:04:66:BE:7D:86:5D:90:16:CE:CF:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A098034C8AC8193A1ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceccf0be-b97a-38bb-a3eb-041cfb0cfd21.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33662
IP address blocks:        96.79.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:09:80:34:c8:ac:81:93:a1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=82a753b0-458c-4d22-98dc-2ab004d6df15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:4d:ff:1d:53:f3:9c:08:51:a8:d0:76:8d:
                    ac:ed:54:b2:4c:0b:50:fe:73:aa:c5:45:e4:e1:04:
                    28:f3:df:e5:a9:a9:e0:bf:d2:06:78:48:90:0e:ff:
                    d1:60:d9:ab:d0:a8:0d:f6:46:ca:ad:5c:09:1f:e3:
                    b5:16:83:8b:cc:1f:72:28:77:9d:5c:a8:1d:b4:e5:
                    fd:91:98:52:f4:43:b0:ce:05:ae:b5:9e:24:9d:fe:
                    8b:fd:76:00:ec:1f:15:7c:80:47:cc:84:e1:e4:01:
                    11:7b:0c:1d:6f:99:89:a8:47:44:51:6b:ea:03:69:
                    65:8c:15:a9:73:5d:25:4a:03:f6:17:ce:f7:91:d5:
                    a7:ce:e2:02:8c:38:b5:84:a2:26:ae:da:fd:cb:ff:
                    33:47:8a:da:b5:b4:74:59:ce:b4:ed:ff:7a:1b:8e:
                    c3:6e:73:44:ae:62:41:17:41:69:53:40:ff:ef:be:
                    6c:b5:e6:aa:70:19:25:8d:65:27:68:5f:cc:17:1d:
                    80:a9:67:e4:77:18:ae:e2:dd:20:a2:9e:96:81:66:
                    49:03:15:17:bb:27:81:49:74:52:8b:fc:2c:bc:37:
                    ea:ea:3d:5e:ab:3e:3e:7a:5e:0b:0f:fa:cd:4d:ee:
                    2d:c7:16:71:5e:70:54:40:4e:3b:9d:a9:19:6b:64:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:07:76:FB:88:0C:50:27:11:04:66:BE:7D:86:5D:90:16:CE:CF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceccf0be-b97a-38bb-a3eb-041cfb0cfd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.79.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:0b:19:78:e5:94:ce:a2:9d:0e:31:c6:f9:05:95:cc:c0:
         39:45:d2:a8:70:fa:15:43:d9:5a:a2:5d:05:8a:50:86:58:dd:
         3a:f0:b9:ad:de:3b:85:63:dd:f7:c0:57:f5:04:9e:fc:4f:6e:
         4e:e5:63:ea:c1:cd:ab:fe:a6:ad:27:dd:2a:ce:4a:d8:71:7c:
         b5:a6:5a:af:f1:87:3d:6e:c1:34:85:a0:78:83:97:ef:9b:45:
         d5:1c:0c:74:53:61:ce:aa:0c:d6:9c:38:8d:ed:57:17:28:07:
         6f:6d:32:f7:e1:da:2d:37:a0:df:65:76:a1:f0:79:90:73:e5:
         e1:8b:1b:f0:e9:6e:74:9b:b5:47:53:2c:6f:4e:db:a5:e1:c4:
         ce:13:cc:0d:d1:de:dc:e9:90:dc:60:7b:fb:0f:40:1c:50:39:
         b2:1f:3b:4c:a2:c6:63:5d:7f:0b:8e:b3:f1:0d:f1:0c:4e:e4:
         61:d7:5e:1a:10:5e:0b:26:95:f4:24:1c:74:1e:76:2d:c1:5e:
         4b:f7:1b:67:89:9e:39:90:4d:72:bf:21:fe:86:d9:7a:18:9d:
         52:89:a8:fc:fc:0d:d5:03:d0:08:ef:08:4a:7e:9c:28:2b:d2:
         67:3c:67:b9:8f:b6:06:d7:b7:ad:09:95:c4:f1:e9:27:c3:1f:
         b4:4a:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:16 2024 by rpki-client on console-ams.rpki-client.org