Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37369276-cf37-3e2d-bc6a-f3ce8576f777.roa
File:                     37369276-cf37-3e2d-bc6a-f3ce8576f777.roa (raw, json)
Hash identifier:          x2oOAWDlOlQuclPMiE75ZEq0b0Gr0Rt4hwEvDF4uteQ=
Subject key identifier:   12:52:50:80:6F:9F:E8:9D:87:CB:EA:A9:AE:9D:45:9E:7C:1F:74:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB7FAC6B264DA432685140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37369276-cf37-3e2d-bc6a-f3ce8576f777.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33490
IP address blocks:        96.79.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:7f:ac:6b:26:4d:a4:32:68:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8a001445-2ee8-4200-b944-5d592371ffa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:73:a5:de:29:35:93:34:01:a4:91:f3:96:
                    da:5c:a7:28:5d:da:97:c8:0d:60:fe:dc:c4:12:6c:
                    a5:d5:a0:43:5a:fe:1d:85:c3:a0:da:13:d8:f1:23:
                    df:d0:f8:21:87:e0:04:2f:eb:82:6e:b4:b8:64:8c:
                    01:12:bb:64:d8:c5:7b:03:f0:bc:a2:6a:b0:26:6f:
                    b7:46:5f:56:24:8a:6f:b7:9e:b9:8d:e6:56:fe:d1:
                    16:66:79:63:d3:f0:ca:93:2f:1e:91:eb:90:95:39:
                    82:6a:e9:bf:4e:01:b1:18:59:fd:54:71:2a:d0:56:
                    11:1b:44:8e:14:f5:46:bb:e5:22:49:e2:ab:98:31:
                    66:ad:01:ed:72:72:8f:98:ec:a5:cb:f8:dc:42:00:
                    19:9d:a2:f9:60:85:ec:ce:b4:47:db:18:21:13:72:
                    23:de:85:ba:e1:48:32:fd:6f:1b:7d:f2:56:09:8e:
                    a9:6d:8d:58:18:8c:7b:3c:94:b4:c9:64:d6:21:fd:
                    15:d6:a0:e0:52:bc:ed:6e:08:36:6b:2a:7d:7e:11:
                    c0:cc:59:85:15:0c:40:bd:f0:22:0c:cc:5c:06:7c:
                    07:c3:fc:3f:e3:d2:de:b7:72:84:35:9a:68:0b:ef:
                    92:ac:c0:9f:04:11:5e:c0:80:e1:41:cc:44:81:74:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:50:80:6F:9F:E8:9D:87:CB:EA:A9:AE:9D:45:9E:7C:1F:74:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37369276-cf37-3e2d-bc6a-f3ce8576f777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.79.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:27:ff:b4:5a:0c:91:ed:61:00:be:8e:68:89:4e:57:92:54:
         20:0d:ca:af:e3:c8:27:32:22:f0:f9:4f:f1:51:14:bb:3a:0c:
         74:0c:3c:a8:d0:d1:5a:c2:7f:e8:0b:42:e2:a8:84:7d:86:2a:
         c9:4c:e2:27:06:13:2a:c9:c0:41:77:40:44:5e:8b:63:5f:2c:
         cd:e2:fd:10:3d:43:77:8d:a9:e4:a0:4c:f9:f2:c1:21:a6:cb:
         af:4f:c0:a6:93:1a:9f:d3:2b:79:34:69:75:23:a6:48:56:d3:
         57:66:dd:b9:50:2b:7d:d9:85:ad:0f:5c:91:11:f8:ad:d7:ec:
         72:08:56:4e:a8:05:8b:f8:3d:99:3e:c0:39:86:a8:bd:16:b6:
         3a:fb:78:0e:2a:49:21:16:6b:48:69:94:6b:b2:54:ce:97:22:
         45:bd:5c:42:e0:b4:16:44:f8:d0:19:ab:0d:6a:58:97:38:26:
         f1:13:d1:a3:d8:94:e1:c2:1e:80:4b:ea:c8:8f:36:f8:90:b2:
         10:40:4c:09:16:8c:23:9f:29:81:f2:aa:67:20:77:41:48:f0:
         25:99:51:1c:87:bf:0c:3e:8c:ed:1f:e9:cf:5f:ee:48:e4:67:
         95:ff:be:86:b9:03:ed:65:3f:9a:85:b2:1e:c4:63:f7:1c:f8:
         35:03:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:15:39 2024 by rpki-client on console-ams.rpki-client.org