Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39747dcb-1427-3c89-9544-b6e39601de16.roa
File:                     39747dcb-1427-3c89-9544-b6e39601de16.roa (raw, json)
Hash identifier:          GZZC7atmOewBZmUaZIugBPDGjkovEFAjYY9i1J1gP4M=
Subject key identifier:   B2:74:74:A1:77:13:45:79:C9:BF:4C:41:4A:80:88:9D:DD:7A:AD:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB3F741D7082E7C621C4A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39747dcb-1427-3c89-9544-b6e39601de16.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        96.109.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:3f:74:1d:70:82:e7:c6:21:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=b7a6ff1d-25b7-4476-9ba9-729b01f57184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:59:ab:6c:02:81:f6:76:8d:0e:ee:1a:69:
                    5d:a7:91:80:73:52:c3:14:c0:19:b1:6b:59:93:26:
                    74:9a:40:9b:f4:1f:19:73:cb:4e:77:d0:ef:f2:3f:
                    07:28:50:74:0a:88:34:2d:91:2d:f7:b8:b2:43:04:
                    de:f7:17:29:7f:90:7d:74:f9:7d:1a:37:5e:36:cf:
                    2a:a0:95:c0:76:c8:1e:c6:b8:dd:bd:6a:94:5d:92:
                    06:47:90:56:e7:0b:9d:59:2f:ba:d3:8b:56:a3:b0:
                    fd:c8:f9:b6:4a:38:de:7b:4d:61:2e:fa:00:05:2f:
                    3c:b0:0c:b0:66:0b:e2:7c:a1:2b:31:7e:01:90:6a:
                    aa:cd:81:da:3f:b1:1c:eb:ba:ea:46:32:d4:19:aa:
                    7f:cc:0a:1c:08:1b:64:f7:78:7e:2f:23:2a:cc:5e:
                    41:4a:29:a4:b1:b6:e7:3b:f5:40:17:7d:d5:30:e3:
                    19:7f:2f:26:26:61:8b:68:76:48:ef:10:22:42:e8:
                    ce:d4:ee:3f:31:5b:ca:94:62:51:59:a5:ee:6c:b6:
                    37:5f:aa:9b:bc:32:aa:a3:92:a5:20:03:a0:01:ce:
                    5b:f6:ad:de:2c:76:ad:73:fa:c9:55:ec:a6:16:52:
                    5c:75:33:f5:96:bf:55:15:17:5c:d5:7f:61:5a:c6:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:74:74:A1:77:13:45:79:C9:BF:4C:41:4A:80:88:9D:DD:7A:AD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39747dcb-1427-3c89-9544-b6e39601de16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:d4:39:76:8c:29:64:0d:d2:04:71:6d:e2:58:d9:5b:f1:
         0a:38:43:27:89:12:4e:fb:8b:c4:97:20:95:98:13:25:22:64:
         a2:77:94:eb:47:c2:ed:fc:ce:48:90:a1:1f:96:31:58:93:34:
         46:40:72:c6:20:4e:1b:80:0e:78:34:09:a4:09:90:3e:eb:11:
         1b:51:fe:90:ce:5e:e3:fa:8c:cc:23:5e:ca:58:4a:90:e3:42:
         c5:12:ee:fd:65:cd:b7:47:ea:61:4c:84:cb:4e:9c:b1:70:fa:
         d7:ab:f3:c3:c2:c9:0d:b8:b8:ac:bc:48:f7:1e:4d:48:af:65:
         86:cf:e8:b3:62:f5:cb:70:c8:6e:ea:51:1d:51:10:1e:35:67:
         f1:ed:e0:41:db:a8:f2:14:1c:61:b4:a0:5e:43:54:15:1b:b8:
         68:fe:35:67:32:83:60:e9:28:45:c7:3e:a8:88:11:8d:2d:1e:
         54:52:dd:84:da:ff:3d:d0:4e:b6:22:c7:a2:bf:1c:a8:b8:24:
         04:50:50:c0:0e:47:4a:63:c2:07:c1:45:54:ea:65:df:7a:de:
         12:65:21:43:f6:38:2c:2d:1d:1a:d7:a9:9f:fe:c0:dc:de:6f:
         87:d0:c1:a7:87:1d:6e:c4:9d:a2:b0:dc:46:b6:38:fb:bb:0f:
         bd:e2:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:38 2024 by rpki-client on console-ams.rpki-client.org