Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665ed33c-0abd-3164-a445-d781b6c85636.roa
File:                     665ed33c-0abd-3164-a445-d781b6c85636.roa (raw, json)
Hash identifier:          Sub+LJYlcHKdprJXnleEe5tLZD39dikBVgIysmFPFxE=
Subject key identifier:   9F:D4:7F:E7:BC:8D:16:8E:21:E8:78:33:66:A7:8E:64:FE:83:4A:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845331800374BEBDE9ECE754AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665ed33c-0abd-3164-a445-d781b6c85636.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        96.216.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:18:00:37:4b:eb:de:9e:ce:75:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=511ab01e-6de6-4bdf-9037-8ca5ed3598ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:70:f9:df:46:7f:61:ed:bb:7d:59:d1:46:
                    23:3f:fb:67:e6:b7:ea:83:73:9e:d3:f8:68:a2:47:
                    5f:9c:05:c4:5a:be:37:57:e0:1a:b8:b1:34:d6:7e:
                    99:a7:ad:ad:6a:0c:71:b3:ea:ee:86:15:a1:ce:10:
                    37:ab:55:4b:0e:58:c6:98:72:b9:03:ed:50:15:df:
                    3f:68:2a:68:26:e7:fd:28:7f:13:48:4b:61:23:57:
                    ce:76:23:b1:67:15:e3:ec:10:ad:fe:c7:b2:f4:aa:
                    e6:94:12:d8:49:9c:61:b2:cd:2f:e2:07:24:3d:c2:
                    8c:6d:2f:3a:d3:81:33:f5:9a:56:eb:df:49:19:21:
                    7d:69:18:40:0e:c0:86:ca:22:5c:a7:40:04:b0:e3:
                    ba:8e:40:62:b8:f1:3b:75:ab:74:63:db:6d:d6:02:
                    73:a8:51:f2:b8:01:66:70:2d:ec:d8:a5:7c:7b:0a:
                    c2:54:b8:44:21:f1:23:4c:48:e9:e3:38:c8:c7:0a:
                    6b:09:e0:c0:e9:f7:8b:7c:52:61:f9:0f:3d:af:0f:
                    83:23:d7:af:8b:a8:79:b3:2e:7a:ef:f0:63:3b:57:
                    a0:6f:fc:e2:d8:1c:67:91:c4:ab:2a:b4:0c:0a:95:
                    36:6e:47:53:cb:86:77:fa:bc:0d:92:bf:1a:a3:ce:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D4:7F:E7:BC:8D:16:8E:21:E8:78:33:66:A7:8E:64:FE:83:4A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665ed33c-0abd-3164-a445-d781b6c85636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:96:73:e6:ea:27:22:40:10:dd:f5:bb:41:ef:6e:fa:de:c9:
         e1:cc:2f:13:68:e2:30:d8:33:21:40:1f:62:4c:9d:a1:f2:d6:
         d9:97:84:8f:f9:e9:a0:87:79:5a:23:ae:5d:c2:00:3b:47:06:
         35:50:57:97:ee:bd:ff:67:8b:16:62:6b:d3:f5:c8:c3:21:78:
         c2:2e:37:c1:43:7d:6c:6c:5f:03:fe:53:52:4e:a0:ca:bb:95:
         06:31:54:9e:ff:d5:25:1c:8f:64:8f:47:87:07:14:7a:ae:af:
         18:57:93:54:e9:28:20:70:ca:f3:a9:b4:5f:d8:d7:b7:38:e5:
         cc:52:1c:4f:af:75:75:6a:9b:d3:ff:8d:7d:02:5b:84:a7:02:
         e0:30:11:0e:c0:1e:f9:e7:29:c0:fe:1c:7a:c3:4b:47:29:b6:
         19:f2:1b:63:ef:57:5f:a6:a9:a2:16:91:a5:09:96:20:ae:d6:
         5c:5c:65:24:fa:32:28:3d:4a:cc:6a:01:98:22:20:4f:d2:dc:
         b2:c5:09:fc:8d:77:05:e0:4d:53:fc:39:fd:17:bc:60:b1:0f:
         68:59:6c:5d:83:4e:d4:64:e3:8e:08:45:cd:5e:8b:f5:2d:cd:
         f8:f7:0d:84:16:44:2f:95:7d:1a:0e:3e:41:c4:1d:ae:9f:cc:
         b2:ea:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:24:03 2024 by rpki-client on console-ams.rpki-client.org