Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
File:                     c6f25adc-65f3-3187-9117-8c56465b1980.roa (raw, json)
Hash identifier:          v8/A9u4QWSGdfkyPctdZmqpmJtySnIXsILOTy0y1ad4=
Subject key identifier:   FA:24:BC:00:2E:A7:C7:03:4B:11:9E:2F:CE:3D:26:82:75:35:13:A1
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F43285845D933ABBF41F0E79E4B8D0B80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     395540
IP address blocks:        96.8.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:ab:bf:41:f0:e7:9e:4b:8d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=966bda29-c6e9-4e23-9b03-f3d754577228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:aa:1b:48:c0:c9:bb:0b:80:c8:3b:d6:2c:
                    e1:56:da:50:2e:44:9e:ba:ad:fd:fb:a5:e7:fa:f6:
                    98:f1:8c:e6:79:4a:18:e8:f6:10:63:a3:ac:cc:8f:
                    de:be:a1:a8:a7:ed:f2:57:e2:36:1c:85:97:61:5e:
                    31:d0:d2:03:98:b5:23:dd:ab:22:13:d9:40:82:62:
                    9f:4f:86:7d:20:ae:17:ff:85:c8:e9:75:d5:43:63:
                    39:a7:52:8d:00:7c:90:04:91:23:21:8a:a2:93:3c:
                    94:8c:6f:e8:a3:3a:42:b8:50:ec:02:9a:5c:5f:be:
                    28:99:44:16:83:d9:b1:91:4a:a1:0e:21:ff:0a:bf:
                    2a:b5:3a:db:8b:34:b7:bc:9d:52:99:a6:84:c6:7b:
                    32:ad:4c:44:83:c4:bf:5f:47:c0:b9:c9:d0:53:39:
                    95:31:a9:8b:88:53:56:bf:71:de:b4:5d:1c:b0:d2:
                    82:c7:a0:87:af:48:22:71:3c:8f:ea:13:d7:bf:93:
                    7e:8f:8b:db:61:f3:af:83:77:62:ee:34:a9:13:b8:
                    d3:b4:26:31:0b:6b:34:32:27:ff:dd:92:da:db:10:
                    d6:46:eb:f1:c9:b0:dc:8b:40:c0:5c:00:a0:1c:82:
                    57:56:6a:9b:fd:8d:1c:8f:15:f6:4d:7a:3e:17:d3:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:BC:00:2E:A7:C7:03:4B:11:9E:2F:CE:3D:26:82:75:35:13:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:0d:53:e3:c1:80:a3:a7:70:df:57:77:9c:16:7b:c0:80:
         58:c9:4b:e0:2e:e4:f5:23:c3:98:e3:cd:e0:3e:fa:06:03:86:
         c1:dd:c1:d4:88:a9:0f:24:06:70:93:d0:eb:9a:9b:a8:8b:00:
         96:7d:78:5a:df:ac:13:79:d9:1c:8d:a5:6c:6b:80:fb:ff:b7:
         5f:92:72:95:2b:cb:fa:61:3c:3f:a8:3d:5c:a2:83:bf:1b:32:
         33:55:63:07:d9:7a:02:fd:11:09:e4:ea:24:c1:6a:e1:80:d0:
         85:b1:3c:11:83:71:b6:83:84:02:7f:8d:02:e4:31:ff:ea:ea:
         0c:4b:e7:01:b2:83:d4:2f:33:0b:d7:fd:f9:47:89:1a:c0:8f:
         14:f5:0b:aa:71:b4:2b:64:72:b7:b8:bb:92:35:e4:7e:8d:b4:
         c1:ae:83:9c:56:f2:fb:58:5c:5e:88:82:d2:b4:ef:df:69:92:
         da:d7:8b:19:87:be:54:ed:34:36:69:3a:eb:06:8a:16:a4:ae:
         04:9a:4a:06:5e:e8:f5:85:f9:ff:4f:05:7d:67:0c:95:38:63:
         70:6a:e7:d8:af:23:ec:61:ba:05:30:98:2c:9a:3c:34:47:94:
         f8:26:d7:29:45:06:3d:f8:b4:06:53:f7:d1:f8:3a:f6:48:72:
         ca:a2:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:23 2024 by rpki-client on console-ams.rpki-client.org