Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa73896-36a1-33da-82d1-055541b71321.roa
File:                     3aa73896-36a1-33da-82d1-055541b71321.roa (raw, json)
Hash identifier:          Zw0kC7CDfYVUFTTEXd6YkkTLWQhkWCOyFfvS7goEfFc=
Subject key identifier:   A0:B2:95:0A:44:8A:DB:8C:6E:B0:39:61:9E:64:AF:04:1D:F0:79:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAE2D869F057B38E7FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa73896-36a1-33da-82d1-055541b71321.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        96.65.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ae:2d:86:9f:05:7b:38:e7:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=033555b6-aa42-42d6-98be-379920541166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:81:9e:b9:eb:b0:c9:4d:47:2c:72:be:a3:
                    0b:72:9c:b5:55:f5:af:49:fe:76:c1:7e:17:03:8e:
                    63:72:a2:a6:e5:51:69:f5:54:9e:da:28:26:c6:4e:
                    76:d4:9c:56:cf:6a:51:3b:11:7b:3e:65:b4:15:c5:
                    86:43:3b:2c:92:5a:09:b3:cf:0b:e9:ec:37:89:5d:
                    76:04:e0:de:e3:1c:30:00:17:2b:03:c5:e2:3c:91:
                    9d:2e:23:2e:13:fd:c7:a7:73:cc:9f:4e:d7:92:1c:
                    f1:22:27:68:de:79:83:21:d4:45:23:0d:80:9d:81:
                    e1:6b:bc:76:c7:4a:1e:39:ec:33:86:7f:53:57:04:
                    3d:b3:7a:5c:a1:11:61:80:12:42:c4:a5:bb:e5:29:
                    df:c8:9b:f5:82:67:a8:21:f9:38:16:e4:41:64:1f:
                    0b:ea:0d:62:1a:1e:60:7a:55:46:23:9c:8a:64:24:
                    be:eb:b1:3c:9e:b5:7a:19:59:9e:2c:70:49:1b:8a:
                    9d:51:a8:fd:0f:58:1c:1b:fa:31:ab:e0:7f:6c:f1:
                    40:c1:4e:c4:1d:a3:04:55:e4:6b:c1:0e:40:43:1e:
                    61:b6:40:87:61:e6:58:62:5b:da:56:e0:df:8d:1e:
                    a8:07:63:01:ac:d7:52:50:24:bf:03:0b:17:c6:6c:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:95:0A:44:8A:DB:8C:6E:B0:39:61:9E:64:AF:04:1D:F0:79:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa73896-36a1-33da-82d1-055541b71321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.65.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:8d:6c:ff:b3:46:c1:00:cc:ff:e8:c4:a5:a0:1d:01:8e:0f:
         b8:04:9e:9e:ba:96:e7:a2:fc:37:64:7f:d3:41:64:43:71:94:
         79:19:cf:6e:7c:ad:b7:0f:f3:a7:34:f6:6e:4d:1c:8c:e2:1c:
         d4:30:54:61:74:07:1b:e8:cc:5e:de:00:54:f1:e0:fb:18:8c:
         a2:8c:96:4f:36:28:58:57:52:dc:ce:e4:23:e8:01:3b:a1:06:
         ce:30:13:70:a3:40:2c:2c:47:f1:3b:bf:41:e9:d9:31:cd:68:
         8a:b4:87:b0:86:99:4b:80:3e:d5:9c:7e:b2:26:48:4f:81:d5:
         ea:21:bd:79:8b:38:cd:4c:08:12:55:2a:4f:70:78:f4:54:8a:
         2d:82:78:bf:b5:9e:d3:ff:8e:7d:e7:af:6d:f2:c0:f0:a9:a7:
         e3:c0:6c:5d:1a:80:4b:8a:4c:7b:57:93:6b:51:aa:a9:73:e8:
         e1:a0:f8:34:53:41:c5:b3:21:5a:a4:90:9c:f8:b5:67:18:b7:
         cc:48:c7:4f:0b:45:87:77:94:58:03:1f:9d:19:3c:ba:e4:5a:
         3d:7c:8f:1d:d8:fb:42:80:f9:08:bd:89:74:01:b2:47:d5:29:
         9e:70:ae:53:31:28:f6:0e:e3:3a:9a:f6:b1:7d:18:c7:79:2a:
         f4:fc:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:22 2024 by rpki-client on console-fra.rpki-client.org