Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b65d09-6924-3d2d-80fe-7127c3a2c9ff.roa
File:                     20b65d09-6924-3d2d-80fe-7127c3a2c9ff.roa (raw, json)
Hash identifier:          BZ8uP8b8P2BNZtUOldiHvJFuZtBTMFHviDD28ZtQ5JU=
Subject key identifier:   85:F2:63:08:6A:3E:5F:D4:27:4C:C1:DB:DB:C2:F8:7A:53:F3:18:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D520774D534CB59B80D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b65d09-6924-3d2d-80fe-7127c3a2c9ff.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     7015
IP address blocks:        76.96.86.32/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:52:07:74:d5:34:cb:59:b8:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=7dd366f0-cb42-4518-9f30-fa7cbfb6e8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:46:6a:c2:c0:cc:ab:7a:43:aa:2d:71:c2:
                    25:95:46:12:51:c9:20:2e:8c:60:28:91:ce:47:fb:
                    36:d7:c9:0a:bb:27:ea:e9:64:b3:42:3c:bc:05:f1:
                    71:13:aa:bb:34:3b:be:53:db:11:b1:36:a3:ee:01:
                    16:8c:72:06:c9:2e:6f:cf:ba:1d:11:73:15:fc:d0:
                    9a:5f:19:b6:95:31:90:13:76:4b:fc:be:f2:d8:89:
                    9b:74:b1:be:12:aa:3d:2d:97:8a:b7:ec:0a:84:52:
                    2d:11:3f:7b:aa:b7:38:c6:27:b4:d2:c0:1f:c2:66:
                    53:26:93:41:a9:ea:df:e1:fe:2d:69:e9:26:d7:26:
                    69:24:70:cb:55:a7:32:86:db:b5:c0:64:cf:05:ad:
                    17:2b:8b:60:66:7e:f1:3d:76:48:fb:c1:33:4e:3a:
                    a2:ef:f1:32:86:ed:98:a4:b5:0d:36:52:65:da:ef:
                    63:9b:d0:86:1b:62:ed:b5:95:39:b6:ce:45:26:e7:
                    98:ab:bf:54:03:96:21:6a:13:6d:28:b1:78:4e:3a:
                    6f:51:49:b3:b7:ab:6b:4f:ff:1a:f0:b8:29:05:48:
                    61:ba:f4:d2:7c:48:8f:6e:16:d8:f1:cd:43:95:2d:
                    f1:17:0c:b2:fa:12:da:59:5c:7a:72:a7:3b:0e:13:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:63:08:6A:3E:5F:D4:27:4C:C1:DB:DB:C2:F8:7A:53:F3:18:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b65d09-6924-3d2d-80fe-7127c3a2c9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.86.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:9e:c5:00:d7:ea:bc:e2:3c:9f:b8:66:be:f7:73:d7:f0:
         36:7b:f8:f9:6d:a8:c9:50:8a:94:76:bc:a9:d8:3c:ac:31:f3:
         25:14:97:0e:60:a1:bf:70:4a:ff:1d:5b:62:6b:ad:de:b2:1c:
         b9:5f:f5:7c:51:db:d5:7c:e5:bc:56:3e:0b:ee:3f:0a:21:4f:
         b8:02:d9:26:dc:cd:37:6c:6c:09:ee:93:09:4e:c1:1d:83:09:
         d8:4f:49:e1:8c:4d:30:d6:e8:6b:20:75:e0:0a:30:31:b9:46:
         f6:c8:fc:e9:aa:a6:55:d0:98:f1:b8:af:b6:cd:b0:65:11:08:
         7b:31:34:ef:2e:f2:00:5c:65:db:3e:d5:4b:9d:50:4d:c4:66:
         9f:ab:ea:f3:e5:80:e0:ee:fd:a9:a2:d5:a8:6d:a5:24:62:4a:
         69:ae:f9:83:8e:c9:93:0d:b0:9d:07:45:e6:e4:87:7a:3e:b9:
         3f:80:a3:93:44:f1:fa:01:9f:49:b6:c5:c3:e6:7e:e7:29:77:
         11:59:1a:71:78:b3:9b:1c:f8:51:57:98:a6:2c:b5:9e:a5:2b:
         6d:13:db:51:4e:a0:88:d1:6d:99:ad:62:1c:45:84:50:97:2b:
         40:d8:57:85:65:ab:c6:a3:db:b3:98:0c:e3:51:c9:d3:ff:27:
         4f:40:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:14:40 2024 by rpki-client on console-ams.rpki-client.org