Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24dcaad9-ae83-3231-aa5c-43f223472747.roa
File:                     24dcaad9-ae83-3231-aa5c-43f223472747.roa (raw, json)
Hash identifier:          6I6VXNhueyVkZTtC9eiuMlK/FZor6j3B76RKYnFwGCk=
Subject key identifier:   8B:D3:B3:7B:D1:28:F0:C1:9D:A1:0C:B7:E7:39:2F:19:34:8E:C5:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858453317F5FCF7ABF0CC887DBE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24dcaad9-ae83-3231-aa5c-43f223472747.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        96.103.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:f5:fc:f7:ab:f0:cc:88:7d:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=e7f2491d-01fc-4f19-9e52-5656aa61c171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:e9:18:7a:d3:d2:38:f5:f3:0c:79:ff:84:
                    62:69:a0:44:ac:94:15:f4:a2:ed:be:75:be:50:a4:
                    77:dd:da:41:81:00:7d:b3:76:14:a5:17:19:93:c6:
                    14:f9:17:88:1e:a5:9c:c4:c7:32:bc:3b:02:f3:05:
                    18:0d:e6:da:4c:5c:4d:cb:d5:51:61:ab:a0:ce:38:
                    f9:c1:c6:d9:0f:71:48:d7:e9:f3:48:71:c8:d6:26:
                    f4:9a:3e:f1:c9:d9:e9:f5:26:5a:d1:49:83:74:fa:
                    8a:11:28:af:79:df:75:ee:0b:db:ef:5c:31:da:45:
                    63:99:4f:e2:5e:74:fb:a9:5c:23:74:e7:65:f7:8e:
                    2c:07:b4:a1:c6:c6:81:c8:0e:bf:46:87:1b:0b:dc:
                    1f:92:1f:75:e7:23:18:45:92:94:6c:6f:db:7c:15:
                    a5:50:8a:8e:81:84:2e:6b:18:b9:4e:42:94:11:5b:
                    ee:1a:12:0f:ed:50:5e:ac:49:e1:db:99:32:10:98:
                    e1:aa:27:d6:bb:77:05:c7:d7:f4:8c:f5:23:02:37:
                    ec:7d:90:7f:43:1b:a5:01:ce:60:30:74:54:b2:6c:
                    9b:8c:8b:ca:a3:b3:ab:af:ba:31:2b:5a:97:45:22:
                    4a:a3:50:01:a1:09:f6:86:57:dc:29:45:93:28:b7:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:B3:7B:D1:28:F0:C1:9D:A1:0C:B7:E7:39:2F:19:34:8E:C5:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24dcaad9-ae83-3231-aa5c-43f223472747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.103.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:de:e7:9b:36:97:99:6e:f8:be:9b:da:65:e2:13:0b:2d:d0:
         46:9f:b7:41:62:b3:16:1f:4d:52:fd:7c:61:74:5c:15:fd:9c:
         7a:91:ba:06:0d:ab:b9:37:40:69:89:c9:f1:60:a7:92:9f:0e:
         94:15:3e:3c:71:8f:ff:2d:0e:64:d1:66:e0:f5:01:05:d0:8b:
         b8:dc:17:d5:2c:3b:18:ec:d6:fd:ca:b0:c5:16:0f:ee:49:e6:
         c9:9b:56:eb:94:b6:72:d8:04:3f:51:b3:23:6f:c7:41:48:bb:
         2d:87:b5:a2:0c:59:65:71:30:4c:e8:02:cc:1e:93:b2:ae:84:
         c8:1e:14:02:b8:03:0e:58:99:e3:f9:48:cc:64:2f:54:15:ec:
         d9:21:61:c3:6a:e9:be:e5:54:01:c4:9e:19:c1:79:26:6e:61:
         e8:ad:d1:68:cb:64:89:81:9f:a0:a4:3e:3b:ac:2b:49:ab:d1:
         58:54:35:52:3c:93:b9:54:ff:94:ae:9a:12:05:1c:f9:02:9b:
         5d:9a:53:5c:d4:7e:30:27:bf:e8:29:8d:d5:7f:bb:d4:e7:53:
         07:a1:b2:ca:f5:8c:1f:6c:aa:67:b6:f0:de:47:50:e6:37:7e:
         93:67:95:26:d3:2a:1b:86:d8:85:d9:65:dd:a0:17:1e:f2:d3:
         59:37:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:56:32 2024 by rpki-client on console-fra.rpki-client.org