Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/77ee4525-7516-3dc3-82e7-cc50f598c38a.roa
File:                     77ee4525-7516-3dc3-82e7-cc50f598c38a.roa (raw, json)
Hash identifier:          tKlKtnniD/bD9G2Ek6i3O7kCKnmlI/NiXF81niycYi0=
Subject key identifier:   1A:3D:5B:89:DA:56:C3:5D:B5:D1:75:C0:93:A6:E5:6E:D8:F0:91:C4
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F43285845F2B9B53D2FBA14A19155DDE0
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/77ee4525-7516-3dc3-82e7-cc50f598c38a.roa
Signing time:             Tue 21 May 2024 16:25:52 +0000
ROA not before:           Tue 21 May 2024 16:25:52 +0000
ROA not after:            Mon 19 Aug 2024 16:25:52 +0000
asID:                     396982
IP address blocks:        199.47.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:b9:b5:3d:2f:ba:14:a1:91:55:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: May 21 16:25:52 2024 GMT
            Not After : Aug 19 16:25:52 2024 GMT
        Subject: CN=8354ccaf-419a-43da-9c8e-bff7c7952d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:2e:fc:53:75:28:b2:fb:96:34:ee:07:04:
                    34:8e:33:15:70:9e:43:25:9a:b5:6a:55:f0:d9:d7:
                    ee:16:ff:e2:7d:21:e6:29:4e:9f:15:a7:93:da:d6:
                    44:f8:11:b9:fd:aa:52:71:25:a8:31:85:51:58:82:
                    0b:f2:39:8a:a6:a7:71:cf:44:67:d1:dd:c1:98:2f:
                    d4:b8:5e:76:c2:c6:4a:95:9e:29:6d:ad:f8:04:23:
                    05:e1:e6:61:f4:a3:27:e0:5f:97:4f:c6:8b:c5:e6:
                    6f:31:7c:2a:8b:e8:ab:48:b5:19:80:c0:c8:0d:c3:
                    30:0e:2a:4a:e3:58:be:62:cb:a3:76:aa:a3:e5:f4:
                    62:86:54:ff:a8:38:73:37:41:9a:f2:47:20:9f:fd:
                    3b:6a:54:9b:e6:68:aa:14:66:63:ef:e2:44:dc:66:
                    65:60:b4:e5:03:fb:79:8e:b7:61:0b:2b:1f:e9:16:
                    9d:ac:b4:37:9a:f6:4f:52:08:07:fe:02:0a:27:02:
                    70:37:4d:e2:21:76:71:5e:43:d6:89:45:ad:a7:44:
                    a2:3c:e8:1a:c9:d5:c0:b4:b2:05:3d:64:3e:0b:20:
                    14:f7:29:52:67:a6:d5:27:ac:d0:71:19:23:01:a0:
                    aa:97:f5:04:2e:8a:a9:11:cf:0c:6d:22:d7:4f:2c:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3D:5B:89:DA:56:C3:5D:B5:D1:75:C0:93:A6:E5:6E:D8:F0:91:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/77ee4525-7516-3dc3-82e7-cc50f598c38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:2d:be:04:a3:04:ad:c3:e3:29:9c:26:91:53:1a:10:99:
         3b:8a:24:57:ac:62:73:e8:d4:f2:f1:61:05:3c:78:eb:3b:c4:
         97:a5:15:7b:55:1e:27:0d:05:00:4a:38:57:cf:a5:63:fa:21:
         a7:ae:2c:8d:d5:1e:ab:e7:73:27:56:93:98:bc:73:a5:88:91:
         53:53:e1:91:10:e0:09:d4:a8:77:51:26:36:9a:75:d7:8f:f9:
         fc:f1:74:79:80:54:e2:f5:c4:13:45:5d:c4:7c:a3:a1:78:f8:
         5a:d2:c4:6e:04:cc:d6:f2:b8:bd:1c:ea:ee:10:10:c8:8b:15:
         a5:c1:ad:99:90:43:af:f8:50:08:c1:de:ef:0d:50:7b:8d:51:
         f0:05:ff:5f:66:49:39:09:7d:a8:69:4e:5a:85:e9:f8:5f:4b:
         97:4e:e2:4f:60:da:56:fc:88:28:4e:45:39:3c:4c:e5:ae:1c:
         ce:dd:5d:ce:2e:bc:4e:67:1c:a5:66:9c:23:35:82:78:11:51:
         1e:ca:a0:9a:d2:49:8e:16:2b:2c:df:e2:28:0a:2e:0a:06:00:
         63:7a:39:c6:a9:03:07:4f:31:b8:de:96:12:11:da:46:6a:32:
         85:df:43:26:3a:d7:29:e5:1e:02:2c:c4:0c:c2:32:36:89:8c:
         7a:bb:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:55:42 2024 by rpki-client on console-ams.rpki-client.org