Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa
File:                     d8255ef3-7706-3e51-8d86-5efb91628a5e.roa (raw, json)
Hash identifier:          FCr0AV+LQNtioQ/2mZDtgj7+Hgo8+WSymeST/H5El24=
Subject key identifier:   3B:7E:69:F7:C7:94:F6:50:59:6B:EF:09:97:76:40:69:F6:45:29:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049CC20FF8BD2A148C5B4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22258
IP address blocks:        96.71.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:cc:20:ff:8b:d2:a1:48:c5:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=ad2f44ed-8e49-444b-90e6-d02746de7df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:d8:91:bf:05:76:88:51:7d:96:dd:2e:6b:
                    64:0b:e3:16:4a:b3:3d:18:df:ab:c0:b9:c4:84:9b:
                    8e:d5:4c:b5:b3:52:f8:32:c1:1d:b9:9a:b9:a5:fd:
                    26:89:89:99:57:4e:6d:bd:9a:8e:0d:7e:2e:b1:04:
                    9f:81:e6:84:bb:b6:14:18:bb:02:0c:06:d8:76:4f:
                    e7:8a:06:0a:40:4f:6b:14:16:3b:79:52:e2:95:ac:
                    ff:54:2a:f8:90:82:9f:05:c0:31:78:bb:25:b8:c3:
                    0e:5c:14:49:24:1d:db:a7:67:0b:66:58:c5:3d:39:
                    5c:bd:04:6a:16:90:d2:35:88:bc:54:7b:18:f6:ba:
                    65:af:f8:2d:ac:fe:f0:07:59:4d:38:f5:b0:ea:43:
                    ed:ff:93:c5:36:8a:04:1b:f0:62:72:e4:57:b2:c9:
                    52:66:82:2e:8f:bb:c9:78:1b:13:d8:9d:48:d7:46:
                    56:b2:5f:1c:61:5e:94:50:19:7f:29:5c:0a:09:6a:
                    8e:af:fe:30:4c:21:24:e1:a4:34:13:b8:07:60:cf:
                    c2:3a:c7:93:5b:dc:0e:f2:4a:ce:94:61:78:a3:98:
                    52:46:ba:7b:05:72:78:6c:06:97:8c:db:60:a5:30:
                    2c:fe:b1:02:41:89:58:57:5e:20:b2:c3:9d:3b:d9:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:69:F7:C7:94:F6:50:59:6B:EF:09:97:76:40:69:F6:45:29:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.71.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:4b:28:9a:87:83:9c:9b:0b:89:e6:96:5e:06:f5:be:5a:
         74:2b:a9:bb:65:f9:fd:cf:d7:af:fd:43:3b:11:9c:c3:ef:b5:
         b4:7a:37:4c:41:4e:17:9b:ed:d4:58:03:99:9e:a1:7d:99:2e:
         50:44:bc:06:c0:c5:bd:39:33:28:7c:78:2f:ea:3b:f2:97:ff:
         45:0e:3f:4d:94:b3:fd:ae:9f:f2:b7:38:44:4e:34:18:c8:9c:
         e1:27:1c:a8:f6:e1:bb:5e:cd:ba:bf:44:05:dc:a6:d9:af:f5:
         c7:2e:3b:ee:1a:f7:90:4f:b1:7c:d1:b3:a3:98:c6:59:de:04:
         13:e7:9b:72:0d:2d:a7:60:24:92:b8:5a:d6:6b:65:81:58:df:
         ad:fa:85:a3:32:55:a8:a5:21:c6:9b:69:ba:b4:54:66:11:f8:
         eb:28:c8:d3:89:be:c6:7a:2e:4b:63:d1:5f:50:65:e3:91:0d:
         33:76:6b:99:07:71:e9:ee:db:bc:b0:71:ec:3d:2c:62:0f:82:
         31:d6:bb:5b:b6:eb:f2:58:c5:be:83:b6:29:0c:05:4b:2b:00:
         1f:c1:27:b4:35:9c:af:74:6a:e7:2c:67:84:28:61:2c:7d:1c:
         4e:5d:98:d3:c5:d9:77:70:45:24:2a:5b:de:f0:3c:fe:6a:2a:
         29:30:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:35:59 2024 by rpki-client on console-ams.rpki-client.org