Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4ee3f6-bee7-3792-86f9-a50a4d2382dd.roa
File:                     0e4ee3f6-bee7-3792-86f9-a50a4d2382dd.roa (raw, json)
Hash identifier:          q3ivIQfyyN/ZsOBkow7RrP8FljBiw6MAAbe25ZrEKTQ=
Subject key identifier:   60:B3:BA:67:CD:BF:B4:25:A2:8E:46:5D:26:77:8D:DF:E1:7F:03:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858453317F43FE35254B015F4A140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4ee3f6-bee7-3792-86f9-a50a4d2382dd.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        76.96.222.48/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:f4:3f:e3:52:54:b0:15:f4:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=167584bc-8129-4c0d-adf2-7b1c15c12c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:62:c0:58:75:e7:4e:03:35:49:d3:11:b0:
                    74:f8:ea:31:cc:8a:56:96:36:6c:93:c4:58:6b:9b:
                    af:92:6d:cc:1a:0a:b8:e4:fc:36:aa:ec:a6:92:19:
                    50:bb:cc:cb:0c:d9:4d:bf:93:34:d0:1e:3f:d5:37:
                    00:de:f3:0e:14:b9:89:52:67:ee:5d:a9:4b:45:73:
                    e2:67:c3:f0:2e:73:8c:39:5d:d9:23:f4:94:0b:81:
                    fa:e7:0b:08:a4:36:bf:fc:4a:3b:f5:46:87:a0:50:
                    4d:d6:1e:34:3e:2e:42:50:3e:53:9b:c9:0d:38:e6:
                    e4:e5:bc:84:4b:f7:5f:f7:6d:c0:e7:e3:18:ee:f0:
                    2a:81:bc:76:66:b9:29:9d:f8:be:97:63:27:ed:c0:
                    bb:76:5a:24:92:e7:d3:94:4a:c0:ec:3b:e2:b9:34:
                    cc:a8:c1:4a:1d:85:50:1a:6c:76:d0:7c:6f:1c:2b:
                    8b:5b:ee:df:3e:9a:9a:32:cf:f3:86:6d:9d:9e:ad:
                    f4:71:cb:55:b7:a9:f4:f7:6b:a6:7a:90:29:c3:0d:
                    ec:f6:8e:ee:ee:59:aa:b5:83:0c:dd:e6:3a:75:bb:
                    1a:26:52:5d:a6:cb:fc:44:8a:fc:5d:1c:ff:0d:61:
                    d2:b1:2f:df:9f:20:2e:90:7d:b8:4e:65:c2:b9:50:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B3:BA:67:CD:BF:B4:25:A2:8E:46:5D:26:77:8D:DF:E1:7F:03:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4ee3f6-bee7-3792-86f9-a50a4d2382dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.222.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:51:df:55:31:23:af:b2:00:b3:3a:c2:c0:ac:21:0d:91:
         bb:5f:e4:73:7b:2d:9c:e2:c5:65:19:36:81:ac:4f:73:45:57:
         e9:67:45:8e:7a:db:12:bb:9e:30:1e:2f:4b:8f:58:6a:c0:96:
         03:05:93:bf:17:71:7a:0e:98:71:ad:14:f6:0b:b0:ad:9e:64:
         b8:7f:05:67:68:b2:04:47:e2:bd:c7:aa:5f:f3:b8:0c:2b:30:
         c2:83:ee:7e:1a:ed:75:79:ab:29:34:4a:6d:24:57:f0:8d:77:
         7e:66:c4:cd:b7:50:8a:0c:a4:80:ba:87:f9:bd:98:bd:02:9f:
         dd:7c:64:7a:aa:78:29:21:d5:18:a2:20:b6:8c:b8:74:8f:2f:
         0b:0b:a9:bd:ce:24:b0:85:0f:47:6b:44:05:12:5d:57:4a:42:
         1e:d5:60:f3:1d:6a:f9:a4:e4:52:1e:53:42:59:56:95:65:2c:
         ec:77:d3:8a:b3:0f:92:e5:d7:77:ba:4e:a4:02:cc:3d:85:2e:
         c7:18:4e:7a:a3:40:34:c8:9d:38:07:0d:a3:6c:0c:6e:47:27:
         87:5d:88:45:23:d4:48:46:38:bb:e1:2f:6e:b9:57:2e:d9:f2:
         86:a0:49:a0:cf:98:cb:4a:ad:23:74:f3:0d:6a:5f:bf:07:fd:
         58:13:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:55:10 2024 by rpki-client on console-fra.rpki-client.org