Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa
File:                     dc54f9fe-204c-3e0a-9847-339c0c825f86.roa (raw, json)
Hash identifier:          GxTOyReFi/kfvtu00ilQsc7opnThqg0AbGWMV3cDu5o=
Subject key identifier:   10:9E:E5:43:D3:2C:09:5E:FE:D4:D8:80:49:DB:8B:CF:4B:8A:18:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA4153D83C900EE346103A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     33661
IP address blocks:        96.110.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:15:3d:83:c9:00:ee:34:61:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=2caeb5c6-b450-4b63-a7bd-f1187d2a05a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:9d:bc:7f:2c:d8:e5:4b:be:2d:eb:9e:7e:
                    2b:76:49:ed:f9:d3:f6:d1:82:4f:04:a2:60:c5:c9:
                    0a:b3:94:80:10:a1:b3:66:81:63:30:63:50:99:66:
                    9c:6b:39:89:d5:67:ba:94:e2:31:d3:f9:4a:48:59:
                    d7:83:df:cd:f9:b6:4f:0c:71:9d:0c:56:a5:82:e2:
                    89:73:30:2b:4a:81:03:2b:09:42:48:7d:1e:f3:be:
                    fc:9d:e1:10:af:21:52:d8:83:84:58:a3:25:a1:53:
                    78:39:80:e1:dd:5f:16:b1:7f:7a:81:67:43:27:43:
                    cc:77:e5:79:69:5c:fa:a5:6f:7e:cc:8a:23:c0:30:
                    1b:56:5c:ea:b5:bd:65:06:bc:2a:39:79:65:02:26:
                    cf:e2:ef:da:16:2d:17:11:29:73:53:a6:12:39:47:
                    89:44:a4:7b:a0:25:fd:dd:49:be:74:c4:13:9e:04:
                    b8:c1:e9:f1:00:9a:6b:f8:bc:1c:0f:03:0b:b4:64:
                    9a:30:58:10:c2:83:ca:76:6f:f0:20:d5:40:23:2a:
                    1d:00:96:06:8d:27:db:07:86:60:32:dd:3d:f5:e6:
                    f5:72:af:45:15:94:4e:af:66:91:38:b1:5e:e7:dd:
                    e3:5e:56:42:d2:fa:53:02:59:63:35:2c:88:b1:d1:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:E5:43:D3:2C:09:5E:FE:D4:D8:80:49:DB:8B:CF:4B:8A:18:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:03:88:94:9a:55:6c:62:14:37:21:52:25:08:1e:04:1c:47:
         8c:76:f0:ae:0b:32:b4:40:4a:4c:b9:64:53:8b:e2:00:40:68:
         24:c6:ad:9d:ea:6a:dd:72:b9:27:5b:2e:92:ad:4e:59:f3:40:
         f3:8f:17:89:56:ec:b1:86:93:c5:52:2c:23:30:45:4f:75:64:
         75:50:52:97:04:fb:a1:b4:25:66:79:fb:87:9b:84:d6:5b:25:
         43:23:62:72:05:01:9d:dd:d4:c9:38:b8:b2:ed:0d:52:c6:42:
         4c:bd:46:80:d3:75:65:98:28:f2:14:73:c0:3b:83:3f:1d:7c:
         65:dc:58:52:cc:a8:f4:3c:a7:33:f1:7e:57:47:99:ff:a8:65:
         63:75:1d:f3:12:03:17:00:eb:8e:3e:ce:37:2f:1c:c5:2c:15:
         d8:12:46:82:99:81:65:62:c0:36:ef:e9:6d:23:a1:19:21:29:
         3a:ad:99:2f:31:63:ef:2b:62:d0:a5:d8:83:b9:5d:ca:1b:38:
         eb:39:b8:bc:85:69:c6:e2:af:95:bf:90:b5:39:e0:ff:cf:db:
         08:dd:ca:1b:35:ed:57:c7:5b:f2:d2:3c:62:f8:2c:39:30:0f:
         94:2d:48:2f:37:19:47:ef:8c:87:f3:95:9d:5f:e1:2c:3d:48:
         01:ca:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:55:08 2024 by rpki-client on console-fra.rpki-client.org