Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d9d41d69-8e1c-3486-95f9-068346dc200c.roa
File:                     d9d41d69-8e1c-3486-95f9-068346dc200c.roa (raw, json)
Hash identifier:          hy2ALJ62WGiz/TDMbpc4gOP9vVyXHEeMfp4fju5aET8=
Subject key identifier:   7C:34:EF:18:B0:D3:AC:B5:7E:A3:76:D7:9E:88:7E:67:05:1E:00:54
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F432858455E5DA477BCC39E7B63D8AB80
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d9d41d69-8e1c-3486-95f9-068346dc200c.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     16545
IP address blocks:        198.59.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a4:77:bc:c3:9e:7b:63:d8:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=b5e4f326-2e1d-4aeb-b157-e7433eda3f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:14:2d:ae:45:bd:2c:e6:fe:a5:8a:56:93:
                    b3:5b:22:b5:94:22:73:24:3d:4f:57:03:30:32:1c:
                    81:c7:2b:d2:54:bc:f6:7e:8a:be:51:f2:6e:2d:80:
                    16:f1:a1:d3:8e:0b:18:44:54:90:f9:fb:e5:fd:2d:
                    aa:75:bf:76:39:0c:b7:6f:84:8c:bc:d3:c1:2b:93:
                    ac:10:c7:45:17:d8:ae:bb:d2:01:77:d9:33:d0:55:
                    e9:8f:48:9f:bb:ce:bf:4b:db:92:62:3b:dc:41:95:
                    cb:c4:d3:26:3e:cc:38:a4:b3:a9:ba:3e:29:c0:98:
                    23:19:54:10:48:9d:8c:6e:2e:b1:03:c0:08:a0:e3:
                    ee:cf:a4:11:45:c3:1a:d5:6e:80:5b:26:f7:18:6b:
                    69:a5:c5:32:e4:0d:f8:36:87:48:ed:40:cf:f9:6b:
                    71:1e:f6:4f:d1:9d:5e:c4:94:a2:a2:37:70:65:95:
                    86:c0:fd:5f:ff:ef:9f:a1:ac:cd:25:c6:84:6c:b4:
                    bf:0f:7b:21:44:6a:fa:3f:91:b4:ff:21:ed:18:56:
                    61:de:c5:28:9e:67:25:e1:8c:c4:5c:99:1a:5a:3d:
                    7e:7a:e6:35:14:50:14:3f:d4:8e:7b:4c:7e:3e:d0:
                    af:01:fc:f5:1d:c9:d0:22:99:e3:bd:d4:f0:04:c9:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:34:EF:18:B0:D3:AC:B5:7E:A3:76:D7:9E:88:7E:67:05:1E:00:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d9d41d69-8e1c-3486-95f9-068346dc200c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:74:6f:31:ff:9d:d7:17:70:18:c4:95:f1:98:58:da:86:
         1e:08:29:52:7d:b5:85:36:fd:26:61:03:e3:12:31:04:fd:a6:
         42:25:13:5c:9b:d4:85:15:3a:95:b8:cc:88:be:34:ad:25:cb:
         54:b6:66:cc:61:e2:5f:9a:50:e6:65:84:fc:dd:15:01:22:b6:
         6f:5d:e8:82:a5:b3:f5:ea:88:ef:29:53:64:76:f9:3e:6c:1c:
         ee:7f:65:89:50:2d:62:55:0f:d4:0f:86:1a:2b:a1:77:30:41:
         70:4e:28:16:a4:4d:3c:a7:07:3b:9e:6b:0c:82:69:94:39:08:
         cc:9a:62:1e:69:70:05:55:40:9d:b5:32:50:f9:04:fa:d0:a8:
         b3:f0:a6:44:a4:42:22:29:f6:fd:40:5b:74:7f:77:30:07:81:
         b1:a0:01:a9:7d:e7:0d:fb:87:0c:86:41:47:8f:3a:f2:e0:9f:
         d9:6d:cb:41:66:56:56:b6:a5:04:2b:46:02:1a:5c:b7:39:61:
         e5:64:65:89:ce:75:e5:e9:ac:d6:a4:d3:06:ef:6b:cd:82:54:
         b4:b3:21:42:75:e1:fe:c7:62:c4:d1:26:ec:60:0d:4f:f7:e1:
         4d:2f:ca:ab:0f:f7:79:3e:0f:77:3d:f7:f4:49:3c:cf:1d:42:
         7c:2c:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:21:57 2024 by rpki-client on console-ams.rpki-client.org