Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c378c0c-3445-306d-9840-0013c72f379d.roa
File:                     7c378c0c-3445-306d-9840-0013c72f379d.roa (raw, json)
Hash identifier:          McpIWGnA95B7VP68pkdHJwfso/3hJnabUA77gLdy03Q=
Subject key identifier:   72:FC:35:64:48:2D:1A:F7:27:17:F3:C6:E4:03:ED:46:4F:48:96:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584533180C6126841FBA87BEAB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c378c0c-3445-306d-9840-0013c72f379d.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        96.114.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:18:0c:61:26:84:1f:ba:87:be:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=be21a782-95d3-46e7-a446-720b48488324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:3e:3d:39:99:d8:72:7d:ef:31:46:74:85:
                    72:51:02:da:00:9c:30:fd:0d:53:5a:09:0d:06:25:
                    2a:45:af:de:31:74:1c:44:a0:f4:90:66:34:ce:a8:
                    c4:6c:00:ea:88:b0:3e:3e:f6:61:fd:a6:0d:1c:03:
                    7e:4f:48:03:fb:2a:fc:70:42:41:1f:5e:b0:3e:7e:
                    2f:21:1d:64:a3:aa:98:8f:7a:ee:52:40:3b:d9:62:
                    2f:b2:f7:7c:17:07:38:d3:15:40:fa:94:a7:59:0f:
                    86:9a:0d:a4:44:47:68:cd:cd:fa:18:c8:20:8c:05:
                    60:02:dd:35:92:3a:5f:74:e3:55:79:36:10:86:01:
                    b3:d9:81:41:29:06:68:0e:80:65:12:38:ad:58:24:
                    b6:f7:f7:cc:8f:89:d8:86:7e:64:e0:98:9c:a8:33:
                    23:a7:01:45:c6:52:dd:bb:9b:9d:47:d2:62:b5:c4:
                    df:fb:3b:34:09:43:68:65:fc:c2:10:2a:3a:bc:ac:
                    21:b9:ce:3d:0b:f5:f4:dd:00:54:f9:d9:5c:4f:76:
                    ef:65:cc:47:16:5c:ef:7e:9b:76:ec:60:06:e9:9f:
                    19:bb:23:e5:ed:2e:38:07:2c:cf:a8:cc:5e:4e:74:
                    3f:95:72:8c:58:55:74:77:3d:75:ad:f4:47:2e:6b:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:35:64:48:2D:1A:F7:27:17:F3:C6:E4:03:ED:46:4F:48:96:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c378c0c-3445-306d-9840-0013c72f379d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:f8:d2:e0:75:c6:c0:5b:88:2f:b6:3e:db:5c:b8:74:1e:
         d8:66:5d:e5:c7:fc:74:52:ee:3f:8a:73:cc:aa:7d:19:a0:8a:
         7c:71:26:c5:ef:ec:59:52:84:97:6a:10:89:59:f6:5e:e3:4c:
         df:a5:84:9d:ee:59:27:0b:62:f3:1f:e8:69:7b:69:29:d8:1d:
         23:f9:1d:95:fa:4f:88:ca:30:5b:f3:b1:30:f8:b5:88:7d:45:
         e9:3c:63:50:37:9a:4a:5b:5d:9d:cb:a7:25:86:93:56:8c:19:
         9e:76:a8:06:03:ba:0a:81:a7:e0:7e:fa:cd:53:44:e6:c4:c5:
         c3:3b:0e:5d:6f:86:4f:70:6b:6c:14:9b:75:89:89:05:5b:56:
         83:a8:75:2a:a0:18:49:70:e6:03:3d:8a:00:80:8c:34:c5:53:
         d8:84:c7:ff:f4:6d:a9:75:bb:5f:cd:2c:24:73:38:cd:53:ad:
         0f:25:30:df:b5:ac:2e:e5:62:54:7c:e9:7b:15:c1:cd:e3:81:
         7e:62:b8:57:a0:52:45:3b:32:ca:eb:4c:2c:36:9f:09:f0:2b:
         1f:fb:97:3a:a2:87:57:f7:08:3f:4f:9c:45:fc:ba:d9:15:47:
         cb:b5:42:27:91:3c:48:68:e4:06:88:a3:3a:b8:8e:cd:48:8e:
         9d:f9:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:01:53 2024 by rpki-client on console-fra.rpki-client.org