Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa
File:                     3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa (raw, json)
Hash identifier:          5yYaIZTtnryio7I46Q3tbFDDmix6ikdNGsIL8zs5Irw=
Subject key identifier:   16:4D:58:18:62:03:F6:53:61:1C:77:7B:9F:F8:FA:74:AC:FB:5D:8D
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F43285845C9741089E56FE64B840E3CC0
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa
Signing time:             Mon 06 May 2024 21:37:25 +0000
ROA not before:           Mon 06 May 2024 21:37:25 +0000
ROA not after:            Sun 04 Aug 2024 21:37:25 +0000
asID:                     53869
IP address blocks:        198.62.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c9:74:10:89:e5:6f:e6:4b:84:0e:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: May  6 21:37:25 2024 GMT
            Not After : Aug  4 21:37:25 2024 GMT
        Subject: CN=9b029211-0bbc-48aa-be43-c9f098efe725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:97:58:96:56:a4:56:0b:c9:35:ee:1c:ac:
                    f6:c6:34:da:52:5c:86:bf:77:bf:50:fc:93:68:81:
                    5b:cc:e3:11:53:7e:c2:d4:48:5f:22:8f:53:2c:23:
                    3e:6f:b4:14:b1:bf:62:bf:39:d8:47:f1:c0:c7:c1:
                    47:ad:22:bb:0e:2e:b6:b0:84:46:95:2f:8f:cf:8b:
                    30:1b:0e:49:b0:e9:e9:ae:51:9a:0c:ef:5f:2e:78:
                    34:b9:c1:db:8e:3d:b8:fd:31:98:89:eb:a3:50:9e:
                    08:36:28:4d:aa:55:8e:a7:5a:88:c2:9f:01:0e:29:
                    74:86:09:c5:06:dd:91:35:02:e6:1a:4f:35:e7:d9:
                    0a:d6:c1:06:53:30:ae:f6:40:d8:e8:b9:5f:8c:8e:
                    3b:c5:71:58:1e:3b:50:d5:7f:3c:85:42:c9:5a:19:
                    51:d6:fd:9f:38:73:5a:6f:c5:7c:25:12:12:f3:c2:
                    77:de:69:a3:b3:7c:2a:9b:82:b9:fd:64:54:45:23:
                    aa:66:15:76:02:e7:42:3b:59:03:67:5f:87:dd:ca:
                    4e:04:98:df:ea:b7:c5:4c:05:95:d1:99:b5:cd:f0:
                    f9:d6:28:90:ea:1d:e8:6e:90:5a:e3:39:ab:0d:1c:
                    12:fe:e8:5e:f8:46:39:01:a8:6d:e6:75:45:4c:c6:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4D:58:18:62:03:F6:53:61:1C:77:7B:9F:F8:FA:74:AC:FB:5D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:7f:1a:c9:59:68:fa:5a:9b:af:95:ef:71:62:b8:9c:b3:
         b2:fe:40:fc:a8:e5:6e:f8:de:18:76:36:c5:b8:e4:cb:df:6f:
         76:e8:a4:1d:e8:90:74:35:b0:15:31:eb:70:0a:a2:bf:d2:f3:
         d5:ba:f0:ef:72:0b:32:bb:5a:7d:ba:09:03:d0:48:d5:62:fa:
         57:a9:59:a6:78:04:4a:d1:81:be:c2:0e:81:40:62:b4:49:45:
         fc:db:4a:fc:66:9b:0b:a8:18:11:88:40:1d:c2:e6:c6:be:19:
         60:af:5e:e3:75:6a:2c:4b:c6:0c:5d:da:c7:68:14:69:f4:7c:
         5f:eb:86:07:d1:4f:82:79:ce:d7:fa:1a:e6:c2:3c:8d:b8:e0:
         f2:a1:74:a1:10:db:16:5d:cb:96:63:05:a7:bd:26:d4:f9:a5:
         c9:a3:2a:ac:cf:cd:34:40:5f:9b:ab:6c:89:e5:26:3b:58:e8:
         10:a0:af:da:33:11:63:4e:17:cc:7e:3b:a4:4e:a3:b8:26:91:
         df:de:8b:68:56:12:2b:d8:16:c3:50:5e:28:67:06:02:96:f8:
         8e:bf:a1:9b:5a:09:24:17:a0:3f:ae:c1:23:4c:cc:46:dd:aa:
         a1:35:d6:ac:a6:66:07:b7:42:07:d0:4e:57:25:24:5c:70:d9:
         83:17:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org