Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525b221d-49b2-38f2-bc32-8dd7a08c33dc.roa
File:                     525b221d-49b2-38f2-bc32-8dd7a08c33dc.roa (raw, json)
Hash identifier:          pH9SNo7Q4ijAMgMjyURZhyNmAnh4CTySCF+9wWTIcRA=
Subject key identifier:   8D:BF:9B:B1:24:F9:96:FE:3C:E0:B2:FC:BB:EC:AD:D1:8C:4A:E8:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAE8327A467EEA924F140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525b221d-49b2-38f2-bc32-8dd7a08c33dc.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        96.109.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ae:83:27:a4:67:ee:a9:24:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=34231758-f315-4db4-8fb9-8e6d574f184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:e2:ad:b5:34:20:a4:c8:ce:2d:8f:3a:3a:
                    c4:f4:14:3d:d1:41:21:6d:d6:6e:da:46:a1:9b:e7:
                    2d:3c:50:f4:01:f6:18:97:ae:57:e7:1e:70:ec:d5:
                    75:13:fe:0e:dd:2d:ee:71:38:a1:6e:92:fd:b5:ea:
                    ce:24:7f:98:7a:eb:81:44:dc:a7:09:af:22:a2:39:
                    60:01:b5:ac:f4:19:2d:16:b2:e8:5d:26:8e:0e:86:
                    7b:a3:aa:25:1d:ef:cf:ac:c0:cf:bb:b1:3c:f2:b8:
                    c5:f5:cf:53:8d:5f:6f:0b:d0:a1:95:da:7a:f5:4d:
                    bd:1e:b5:0e:5c:5c:27:02:5a:86:7d:f7:de:4c:70:
                    f5:4c:19:1a:2c:d1:e3:22:bf:77:07:02:e9:95:aa:
                    3e:c0:3f:ec:4f:2d:49:e3:4a:fd:0f:7b:2a:0d:e5:
                    a5:23:50:5b:3b:79:3b:09:74:b3:90:e4:17:79:7c:
                    80:e7:de:7c:0d:2e:2d:12:ee:dc:c5:9e:1b:3b:e2:
                    eb:27:39:bf:e9:7b:2a:b8:60:b5:35:c5:c3:a3:5c:
                    27:28:97:38:3c:13:9f:b8:59:32:68:23:73:80:35:
                    e1:f9:c0:11:c0:4f:cf:fc:b9:27:97:11:70:0c:5b:
                    89:6a:6a:0a:7f:9b:ff:23:2e:01:f5:f5:55:6b:0a:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:9B:B1:24:F9:96:FE:3C:E0:B2:FC:BB:EC:AD:D1:8C:4A:E8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525b221d-49b2-38f2-bc32-8dd7a08c33dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:b6:3b:6a:36:7a:d4:dc:10:27:32:c4:0d:dc:87:6b:2f:
         47:5c:4e:9a:74:44:f3:5c:26:72:16:af:b9:39:06:35:d7:41:
         a6:05:33:0c:2f:00:b4:a4:bc:0f:23:81:47:9d:9b:15:59:90:
         dc:31:98:d0:df:59:19:bc:15:5b:78:8c:ef:d9:76:e1:ae:e3:
         82:96:9e:62:bc:55:fa:0f:8f:f6:a7:fe:3a:e3:8e:57:23:8d:
         91:e3:bc:50:f5:24:2c:09:98:fa:81:ce:38:9f:79:85:2c:58:
         46:21:08:40:48:76:5c:f8:db:92:cc:6b:3e:a5:9b:e2:47:a5:
         80:01:11:ce:41:86:2a:f0:4e:cb:79:07:0b:9e:85:5d:45:74:
         c9:fe:fe:12:10:78:70:fb:48:f5:36:24:f8:c9:97:ef:46:af:
         7d:74:1a:be:e1:d6:6e:3c:a0:b0:39:24:88:94:84:fb:51:31:
         87:11:a4:3d:1c:61:08:2b:f6:81:f3:af:13:2a:75:92:c8:82:
         4a:e8:c7:44:a9:03:80:87:91:b4:18:99:d4:15:65:8b:a6:fc:
         66:3c:2b:01:87:9c:04:47:fb:a3:73:4b:19:84:9c:9c:7b:ff:
         45:9e:b5:1c:e8:62:af:f6:bb:fe:06:b6:1e:6b:91:9e:77:bc:
         3c:26:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:48:46 2024 by rpki-client on console-fra.rpki-client.org