Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
File:                     bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa (raw, json)
Hash identifier:          H9ZCemut3AU7FMvMybjUhTrTN70IHHkRyn6srVElabo=
Subject key identifier:   35:21:0A:A9:3A:DE:7B:61:E4:27:A8:8F:57:3C:9E:E0:01:A5:46:4C
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F43285845C8DA514048F6B75B92FAA780
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
Signing time:             Mon 06 May 2024 16:27:38 +0000
ROA not before:           Mon 06 May 2024 16:27:38 +0000
ROA not after:            Sun 04 Aug 2024 16:27:38 +0000
asID:                     396982
IP address blocks:        199.47.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:da:51:40:48:f6:b7:5b:92:fa:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: May  6 16:27:38 2024 GMT
            Not After : Aug  4 16:27:38 2024 GMT
        Subject: CN=415e8619-8eb2-4431-b207-456fae808086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:1a:23:3d:de:ce:03:79:32:0b:16:cb:a5:
                    7d:bf:1a:a2:ff:86:d7:4a:69:00:28:98:cb:8f:f6:
                    a6:fe:fc:1b:76:ba:ec:a6:7e:c1:f9:25:37:98:c9:
                    5b:6b:3e:e2:19:3d:85:b0:bf:00:00:b5:e4:af:8a:
                    75:9d:e6:dd:3c:d1:0a:69:a4:0e:ab:58:23:ef:c0:
                    f5:bc:d1:f0:54:35:5d:a5:46:61:10:99:c7:74:f3:
                    65:9b:49:ce:24:37:1a:73:e5:7b:3b:b8:51:ef:9d:
                    30:03:e3:62:cd:e7:65:4f:cb:6d:84:93:d3:bf:70:
                    71:e3:7e:c4:83:0e:c1:6a:18:29:33:b4:21:d6:f4:
                    a4:0d:50:6a:94:71:7a:c7:0e:84:0c:2c:c6:a7:07:
                    46:00:6e:2c:9e:02:4b:f8:73:cc:d0:ba:56:44:c8:
                    b9:3f:b7:7b:4f:ba:a6:bd:83:63:11:2a:11:83:29:
                    86:a5:65:80:64:f3:f1:78:85:26:90:ac:5c:6e:31:
                    f1:5f:ca:4f:c4:44:50:4f:c9:59:14:13:bf:c4:37:
                    8f:f6:c0:0f:b3:a5:5b:d8:fe:2e:43:67:dd:ba:41:
                    39:6b:4d:91:5f:9c:25:4f:41:cd:69:e1:89:97:6b:
                    35:a9:0b:10:dc:36:5c:16:0f:a3:a3:e5:df:8c:09:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:0A:A9:3A:DE:7B:61:E4:27:A8:8F:57:3C:9E:E0:01:A5:46:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:04:89:4e:3d:12:be:fe:6e:81:14:0b:71:ba:34:e8:72:7d:
         15:c3:5b:26:be:fe:03:41:cf:38:fc:00:60:88:64:34:db:24:
         a5:e9:ea:28:a8:62:e0:e6:57:19:32:4f:4b:61:9e:7c:a1:c6:
         65:23:2a:dd:23:54:a0:8a:59:cb:a4:bf:6b:59:59:b4:7f:ea:
         09:be:5e:d1:b8:89:af:46:01:fc:e3:14:44:3f:28:16:b8:97:
         1d:5b:f4:1f:8c:06:10:4d:76:63:23:b7:11:62:89:ba:d3:da:
         1c:96:85:62:26:85:ac:e4:ad:a8:9b:d7:36:be:ff:32:53:9b:
         f4:d4:e3:0a:ac:4d:ef:12:c3:35:1c:58:5e:ae:2e:f0:71:89:
         b7:c6:a1:8e:2c:a2:2d:7a:7b:d3:e3:6a:dc:ff:08:5e:fc:67:
         15:c4:22:46:bd:84:a9:99:22:c0:f4:8e:69:e8:da:4d:6d:b1:
         c3:e8:0c:1b:80:63:45:f1:81:34:e3:46:84:1d:e4:bc:7b:0b:
         ce:ad:0b:f7:95:9f:84:6b:4e:20:ab:c0:26:27:6a:b1:9b:25:
         e0:dd:54:5f:dc:c0:27:54:17:b9:79:6a:f9:33:3c:86:c3:2a:
         ca:32:43:02:d6:64:45:c5:4c:23:ef:28:72:b7:1b:b9:59:dd:
         a8:39:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:59 2024 by rpki-client on console-fra.rpki-client.org