Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa
File:                     bccd0e06-f581-3834-a98d-5e65dbd7728f.roa (raw, json)
Hash identifier:          qko5ADV3Oronei6/F7dlHPnnG+QXw+nCJ4ol5T7xIzw=
Subject key identifier:   9A:DF:6D:34:2C:70:FB:85:1C:8E:AA:32:FD:54:FA:FF:84:60:EE:CA
Certificate issuer:       /CN=7db346f0-17b1-4b0d-942b-291f70e18910
Certificate serial:       010D0C9F43285845DEC90B76FA46766A59317600
Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     40317
IP address blocks:        192.96.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:0b:76:fa:46:76:6a:59:31:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=e1a0b7d9-df7d-4ada-8d69-d85d5ff143d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:56:31:ed:f4:47:0a:c9:37:c0:22:9e:5c:a6:
                    c4:de:f2:18:3a:12:fe:10:5b:e9:a9:b6:a1:27:7d:
                    67:26:47:e7:8e:c2:f1:34:06:94:ba:7e:d4:cf:62:
                    4d:90:d1:6b:d1:95:4b:8a:b1:f9:c3:38:26:85:74:
                    9a:2d:bc:c2:47:13:bd:14:b1:84:21:b2:f6:24:cb:
                    57:76:c3:e8:3e:1c:27:cc:29:75:37:a5:cf:8f:80:
                    40:c7:42:33:15:41:a3:53:d1:22:99:24:57:98:27:
                    77:71:85:9a:61:de:aa:03:1e:0c:d8:34:b8:6d:6d:
                    7e:bd:53:1f:b8:d1:8f:04:3c:eb:c4:5c:83:19:c3:
                    53:89:db:5f:88:aa:21:51:b1:8c:da:2c:e9:39:95:
                    cb:d6:b8:42:0b:76:ed:cf:b6:ae:d1:f7:34:f8:cd:
                    2b:00:44:a2:82:05:ce:d5:a8:9e:2d:6f:b5:9e:19:
                    b2:78:39:54:50:84:6c:09:be:cc:f4:36:6f:ff:45:
                    41:fa:66:15:b1:51:be:3e:f2:57:bd:a8:c8:50:a1:
                    21:b5:76:f8:49:03:58:0b:af:b8:29:21:8f:d2:cb:
                    a3:fa:c0:4d:b7:83:7c:25:e5:75:a0:3b:6a:bc:80:
                    ff:b3:5d:9e:98:dc:58:28:73:01:08:4e:22:38:eb:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:6D:34:2C:70:FB:85:1C:8E:AA:32:FD:54:FA:FF:84:60:EE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:d0:16:7a:f3:cb:65:cc:13:3c:1e:ab:9a:40:bf:c6:b5:
         b4:9e:9a:7a:b0:e7:be:81:6d:e6:6f:ee:d6:17:a1:78:76:06:
         50:3d:94:ae:98:4b:0e:35:57:93:ef:f5:de:b9:79:ae:78:b7:
         41:a5:85:0f:ca:78:04:51:2a:b0:2e:11:f9:41:57:2c:22:ce:
         a3:f8:c1:c2:af:ca:98:c2:6f:88:19:07:b3:a4:d3:a0:38:67:
         4a:f2:4b:2c:44:b3:dd:11:0d:dc:5a:04:0d:37:0b:81:7c:fd:
         c0:82:cc:42:e1:4e:55:3a:ca:35:8a:05:c9:ff:53:e0:d3:46:
         9f:22:27:b4:f0:69:b4:21:e6:8c:c7:94:52:93:f1:f7:60:b1:
         cb:65:08:28:f5:95:9b:ce:26:11:de:4e:1d:d8:05:6e:55:f4:
         19:f0:7b:d2:e7:11:cf:5a:bf:c4:23:3e:60:0c:d9:25:ce:85:
         d6:0f:02:55:3f:ee:e3:56:5d:ae:1b:3e:19:f9:99:93:c9:73:
         11:f5:71:0d:e4:55:ad:24:3e:98:e0:e5:86:78:3e:4e:b0:b0:
         3d:17:cd:be:11:b1:3d:49:f9:96:13:74:d5:55:d8:c7:73:07:
         7a:24:b5:c9:9e:79:00:36:cc:59:15:b5:4d:c9:72:34:6e:2a:
         c0:60:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:42 2024 by rpki-client on console-ams.rpki-client.org