Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa
File:                     41a70eb2-5061-30f1-809b-803f649d06f9.roa (raw, json)
Hash identifier:          Z4v5CWYKUxCHOIQFPNSGJJnhfXNv9vu6f94EK8XCfrk=
Subject key identifier:   92:60:C4:BE:0E:9D:92:F9:58:6D:75:6B:42:2D:08:82:05:50:CE:42
Certificate issuer:       /CN=57b5faad-63db-4cfd-a55b-4143c3e94291
Certificate serial:       010D0C9F4328584625F9687F4BDD846835BD9000
Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa
Signing time:             Sun 09 Jun 2024 01:00:24 +0000
ROA not before:           Sun 09 Jun 2024 01:00:24 +0000
ROA not after:            Sat 07 Sep 2024 01:00:24 +0000
asID:                     54225
IP address blocks:        96.31.192.0/20 maxlen: 32
                          209.239.96.0/20 maxlen: 32
                          216.49.96.0/19 maxlen: 32
                          2607:fb40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:25:f9:68:7f:4b:dd:84:68:35:bd:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291
        Validity
            Not Before: Jun  9 01:00:24 2024 GMT
            Not After : Sep  7 01:00:24 2024 GMT
        Subject: CN=18393d74-3a54-4e03-9063-fa26aca430ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:7d:8d:16:0c:72:eb:e7:53:80:26:10:16:
                    45:7d:d5:f8:c9:ce:c4:b5:9a:de:0d:ee:9e:08:da:
                    83:66:86:37:2d:7a:9d:2a:ef:22:60:0a:bf:13:7e:
                    6f:fe:83:ee:cc:67:5c:f7:64:02:92:38:0a:cd:52:
                    d9:95:46:50:e9:0a:57:b6:12:e1:d1:53:a6:cf:31:
                    04:eb:a5:2e:e0:60:b8:b0:91:15:36:f9:84:98:4b:
                    78:1b:59:fd:28:0a:11:6e:8a:a8:0e:53:57:11:85:
                    77:f1:e8:ce:94:59:ba:d5:ff:48:c6:a7:b8:05:02:
                    83:8e:38:64:18:bf:de:1c:92:16:5c:1e:09:b6:bf:
                    c7:37:fc:28:fa:ce:55:d8:74:f3:e3:94:ca:c9:7c:
                    97:31:6d:cd:a5:99:f7:d6:7e:77:d6:94:12:12:9c:
                    f1:00:6a:7a:01:d1:bb:4b:68:a5:42:47:54:c2:d3:
                    50:4a:b5:6b:00:ab:32:40:7e:52:10:71:7d:59:32:
                    40:7e:3a:df:f3:32:28:71:3f:a0:86:93:98:47:0a:
                    0b:76:10:95:b6:68:09:95:99:59:ce:1c:9a:1f:79:
                    50:ad:e3:96:8c:15:a9:bb:d6:38:cc:22:fc:35:10:
                    30:5d:e2:3a:39:e6:e2:30:6f:3d:8b:64:d0:f5:30:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:C4:BE:0E:9D:92:F9:58:6D:75:6B:42:2D:08:82:05:50:CE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl

            X509v3 Authority Key Identifier:
                keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.192.0/20
                  209.239.96.0/20
                  216.49.96.0/19
                IPv6:
                  2607:fb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:e5:b8:3f:7a:52:70:c5:04:eb:42:5f:7c:b3:88:bc:54:
         c9:7e:ee:e2:5c:9f:c0:ba:46:14:5b:1b:03:d2:1b:36:a6:f0:
         24:56:a1:12:a9:af:22:f9:d1:d9:f6:02:b9:5a:8c:ab:e6:6f:
         0f:05:cf:dc:97:d1:3a:f5:f8:c7:d2:4e:5d:38:ef:fd:6b:df:
         b7:dc:2f:66:96:68:96:38:0b:47:7b:ec:7d:f8:70:97:fa:a8:
         47:7d:ed:f7:9b:57:8c:c4:16:b0:9f:33:b4:9e:15:82:fa:90:
         45:59:cb:b9:d0:cf:4e:ba:ad:16:d5:47:f4:1e:2a:fe:2b:15:
         b0:a6:07:9a:46:bf:6e:d8:42:0c:5c:5e:47:02:56:42:cf:6c:
         ff:91:47:0e:4a:84:52:30:a7:a8:0a:2d:2f:dc:fd:a5:96:46:
         74:99:ab:0f:0e:21:2a:18:6c:39:2d:3d:03:16:b0:18:40:c5:
         bb:e7:cc:ba:30:db:91:ca:18:11:e1:bd:ad:c5:73:60:dd:a6:
         03:ce:77:f7:7e:69:4c:53:be:db:ec:6f:54:47:6d:ac:9c:2f:
         ef:51:5c:13:aa:11:17:ec:f5:9a:d2:6d:92:26:94:e5:ae:ef:
         54:03:b5:b9:74:c5:39:3e:fc:82:4b:d1:90:2b:a1:f2:14:74:
         f1:84:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:12:24 2024 by rpki-client on console-ams.rpki-client.org