Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0ea0023c-b784-3073-b827-3047aab14a9b.roa
File:                     0ea0023c-b784-3073-b827-3047aab14a9b.roa (raw, json)
Hash identifier:          NJWj9uKfcMrlDUIVRMjjgf2WXaY4nesHMl5f3gUqVuk=
Subject key identifier:   D7:D5:D1:AC:40:D5:C9:19:74:B2:3C:BE:A0:9F:B1:78:6A:E1:9F:2A
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F43285845E45E6F1425E88054373AAD40
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0ea0023c-b784-3073-b827-3047aab14a9b.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     36131
IP address blocks:        83.229.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6f:14:25:e8:80:54:37:3a:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=56f8a20d-4181-4d1e-9ce9-0e94e644c2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:b2:93:78:1c:b1:27:41:32:5a:32:3e:fd:
                    59:cd:75:65:cb:35:7f:e5:1d:d3:6a:3d:85:ef:20:
                    0a:ee:10:fd:bd:cc:66:c6:4a:10:03:2f:ea:c8:a9:
                    71:7c:80:52:62:cc:2b:4b:a6:f8:5e:63:8a:4c:cd:
                    c2:e9:b6:ce:39:cf:aa:02:6b:fc:cc:21:d6:94:17:
                    7a:91:e5:27:3e:d4:67:3a:b6:c4:03:63:b1:83:a0:
                    b5:69:1d:51:7b:dc:d8:14:46:71:e6:5a:4b:ba:dd:
                    35:10:3e:db:08:58:ff:92:db:18:3a:a2:54:a8:2d:
                    e1:2f:89:8c:f0:c4:f0:94:28:a1:10:7d:29:77:64:
                    d4:56:b7:49:01:e3:3d:ae:f6:1f:aa:91:79:44:b6:
                    75:9b:7b:49:ae:1a:90:4d:71:c8:f1:64:3b:a8:7d:
                    5b:41:44:a7:28:71:34:06:4d:54:ac:cf:06:33:c8:
                    53:ce:91:07:d4:d2:cd:56:5e:7a:99:52:41:b1:54:
                    ca:a4:f6:f7:4b:48:e5:5c:97:d4:cb:b7:4c:5b:20:
                    0f:56:a8:3d:b0:5d:46:da:92:da:7a:a8:cb:47:2b:
                    e9:4b:31:9b:f9:5f:9b:56:5a:0d:6d:71:09:50:96:
                    92:d8:38:1d:65:ed:12:b6:04:32:d8:76:27:98:68:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D5:D1:AC:40:D5:C9:19:74:B2:3C:BE:A0:9F:B1:78:6A:E1:9F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0ea0023c-b784-3073-b827-3047aab14a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:94:94:ef:b7:11:a0:20:b4:82:29:92:b6:73:e6:ad:fd:
         f2:93:b0:59:f7:ae:09:56:37:d2:b2:19:fa:3c:18:ad:6a:b2:
         c6:54:04:fc:cd:ce:86:dd:ba:e1:6e:65:6d:a9:19:aa:26:c3:
         e0:02:6c:a0:17:9d:a3:c1:4a:d8:3a:27:54:87:07:b2:70:9b:
         3c:f9:8e:25:2f:39:cf:2c:71:c8:70:0f:09:1b:4e:ae:d3:ee:
         f0:6d:47:18:85:09:76:59:8b:f8:a5:da:d0:21:9f:59:5c:8e:
         38:46:14:a9:37:bf:2d:bf:4c:54:0f:9e:b1:17:55:11:30:17:
         46:95:48:ee:ed:92:49:4b:40:49:29:42:ba:e5:a5:9a:1c:5c:
         ae:38:11:f0:ec:0c:ef:f3:e2:a6:0a:9d:0c:a7:cd:4a:79:40:
         de:37:a8:f4:5d:d1:1b:18:d4:e4:57:7e:0c:01:3f:e6:fb:99:
         57:06:f8:a6:ee:d6:b2:87:8d:ca:03:dd:c3:87:58:d8:27:2c:
         7a:a3:ab:2e:16:a8:03:d2:ec:57:8c:1c:3c:00:86:0e:ca:0c:
         c8:4c:f7:ed:5d:b8:79:7a:a7:1a:1a:26:7b:de:da:2e:b5:1d:
         eb:51:7c:a3:be:b4:61:65:1b:bf:74:50:3c:9a:44:dc:9a:19:
         23:e8:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:11:40 2024 by rpki-client on console-fra.rpki-client.org