Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa
File:                     4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa (raw, json)
Hash identifier:          thrCJcbigvR1VUdIxnE2/2qObQCQkaznei1BCWVu33A=
Subject key identifier:   38:44:B2:80:A2:92:A7:0B:73:74:E5:15:38:70:EF:F0:FE:6B:E1:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D578FED31493485E2E588
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     33661
IP address blocks:        96.109.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:57:8f:ed:31:49:34:85:e2:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=cd4c507d-f573-4523-b3ea-66a990a1e8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:70:9f:db:17:3c:ed:ec:3f:31:4d:b1:ee:
                    54:2e:af:f2:dd:73:fa:c8:d4:1d:1a:e6:15:3a:d2:
                    f3:b5:63:80:c4:1a:bc:f1:da:bd:44:d8:b3:57:76:
                    b1:9f:a5:96:8f:d4:d3:3b:72:6f:8e:1c:53:94:69:
                    f8:47:a3:d7:72:1c:95:12:a3:a0:5b:8a:be:b0:42:
                    32:07:f0:db:0c:96:23:e1:32:ba:f2:08:fa:88:26:
                    99:3a:71:bc:ff:57:f4:c6:30:89:46:39:71:a1:8f:
                    2e:b7:1d:c3:9a:b1:be:66:b5:1a:37:b4:10:1f:4c:
                    f3:59:51:0a:b6:fe:58:05:fa:eb:c0:f3:ea:33:98:
                    da:4f:ee:57:5e:84:d9:53:70:87:09:15:40:7a:6b:
                    5c:ad:d4:41:5c:8e:8b:ec:ad:95:e3:a3:be:ac:02:
                    e7:bc:7e:04:23:00:a2:7f:f6:67:13:03:dc:75:d4:
                    6d:0d:fb:d5:bf:ba:46:6a:e3:07:d7:8b:d8:87:14:
                    02:df:ec:5f:18:44:fb:9d:bd:0e:f5:5b:31:27:c4:
                    2c:a1:c2:39:1a:d5:e9:90:c1:83:13:e8:a8:08:4a:
                    ae:db:26:fd:9c:44:b4:4f:25:d5:dd:30:1b:ab:d0:
                    15:3a:dd:53:00:98:e8:39:05:72:14:a5:8b:c0:c1:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:44:B2:80:A2:92:A7:0B:73:74:E5:15:38:70:EF:F0:FE:6B:E1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:87:b4:5e:0b:af:fe:f2:5d:13:da:52:56:bc:1c:33:3e:
         33:fa:5f:2b:d6:f0:eb:f7:4c:62:9d:c7:bf:69:f7:ad:62:04:
         fe:c3:da:28:f4:45:83:c0:18:78:32:ab:79:ec:19:26:50:34:
         89:8b:63:21:8f:94:dd:04:e5:20:8c:8a:79:d4:3a:12:d3:94:
         2d:90:8a:24:35:79:ce:dc:24:b2:b6:23:47:81:f5:3e:f7:c9:
         6f:e6:6b:69:8a:ef:82:ea:7e:c8:58:2d:4f:35:40:37:7a:66:
         b1:15:be:57:80:fd:51:b6:eb:9d:66:41:9c:d3:6d:55:3f:b8:
         0b:13:ca:aa:fd:eb:4c:c6:40:b2:6b:ce:eb:95:6e:46:0f:94:
         45:4c:88:fd:dc:c8:28:d3:ff:e6:8c:97:aa:e9:63:e9:21:5c:
         4b:9c:a9:93:0f:74:7a:4f:8f:86:22:58:af:16:68:0d:f8:a3:
         1d:fb:01:6b:1f:78:34:41:48:03:18:ca:d1:2f:77:86:1c:5b:
         b7:64:8b:dd:29:5c:d1:43:b8:d9:5a:ba:ac:cf:6c:88:a5:fb:
         dd:92:73:28:3b:4c:05:da:4b:4d:49:f9:85:d6:b3:ce:4e:b1:
         fd:a6:0b:26:b7:ee:7f:24:60:8c:75:30:ca:8e:4e:97:6c:80:
         f1:5b:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:16:40 2024 by rpki-client on console-ams.rpki-client.org