Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d01c3-ccde-30ba-8084-c18f66773d19.roa
File:                     959d01c3-ccde-30ba-8084-c18f66773d19.roa (raw, json)
Hash identifier:          y+f21vWyf1TB63ywkjeOn0L8iJl00UCwu2QXijFMtIg=
Subject key identifier:   8C:96:50:6A:AA:7D:B3:70:84:C0:F6:B8:A8:A1:C2:17:4C:AC:8F:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F675159A620C2D7EA1BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d01c3-ccde-30ba-8084-c18f66773d19.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        96.113.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:67:51:59:a6:20:c2:d7:ea:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=2068b42f-8597-4038-b7b9-328a6a142547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ef:11:6f:68:70:c3:16:9c:11:8b:18:fd:4a:
                    dc:ef:fa:38:6e:17:1d:f4:5d:e0:8a:21:ab:13:69:
                    4d:ca:1b:19:e8:6f:17:e1:86:e5:a9:71:55:b9:4b:
                    00:47:52:23:da:4e:fd:63:aa:6b:01:6e:da:ef:da:
                    b9:79:af:5a:01:1a:27:60:22:9c:f9:c8:af:3c:d4:
                    cc:00:96:c5:ae:d8:72:da:55:95:2e:92:1c:d9:cd:
                    6c:22:a9:63:36:3b:87:72:47:a4:8d:01:08:97:9a:
                    0a:c3:c8:a7:03:c0:85:50:f6:e0:f6:a2:83:ee:65:
                    5d:06:e6:35:bf:25:79:41:70:62:81:3e:06:dc:9f:
                    71:7b:d0:f8:f5:06:cb:99:b9:46:1a:b9:82:23:f6:
                    65:68:80:bd:e1:2e:7a:c7:4f:66:af:5b:60:0d:25:
                    14:e7:47:d2:6a:db:b5:e7:d2:cd:bb:13:99:a5:fd:
                    c2:00:6c:46:22:18:22:df:bc:39:3e:8e:c6:f8:18:
                    0e:0c:cb:c0:bd:ee:a1:46:63:96:f5:19:c6:a5:99:
                    6a:73:c1:da:ab:bf:09:9c:66:f6:3e:4a:dc:6d:91:
                    24:7e:19:d2:9c:7b:4e:c4:f5:28:d6:dc:4e:31:2d:
                    7e:79:37:3c:d8:03:6c:65:f2:f0:d8:b7:29:41:70:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:96:50:6A:AA:7D:B3:70:84:C0:F6:B8:A8:A1:C2:17:4C:AC:8F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d01c3-ccde-30ba-8084-c18f66773d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:e4:36:ca:64:3c:e0:38:5a:65:0f:43:b3:5c:d0:b2:ec:
         e4:c8:73:f2:77:6c:30:74:dc:8d:1b:b9:59:97:0e:a2:03:25:
         04:c6:33:d7:8d:45:8e:0b:38:cd:d1:3b:a4:c8:04:35:15:66:
         4e:e3:9d:e4:67:03:4c:62:45:87:3a:8f:5e:53:5f:5b:98:94:
         c4:79:0f:0f:ab:63:8e:50:eb:6d:63:a2:74:bd:91:f8:fb:c0:
         fe:57:46:5e:79:d5:75:e4:96:56:2f:ea:f1:5c:54:c5:aa:fa:
         ae:df:e3:cb:90:c4:d8:b3:ed:bb:5e:9f:0a:71:c5:18:47:66:
         4c:01:68:ad:ba:00:7d:68:e6:84:64:43:c2:83:2a:62:d5:28:
         f1:62:5c:48:94:c9:e4:a1:6c:02:41:c8:f5:b1:ec:28:b3:8f:
         30:9c:75:68:4f:f1:dd:94:eb:dc:12:64:c0:1d:1c:51:2c:ee:
         05:81:0d:a4:cf:fe:27:b8:e1:d7:e4:e1:fa:e7:80:35:a1:5e:
         80:90:82:82:96:fc:4d:63:3d:30:b5:fb:e0:3e:7b:dd:0d:90:
         7a:80:d5:54:5a:10:db:a2:48:6a:f8:1a:83:b6:49:1c:53:a3:
         e7:cd:c8:df:35:2a:1b:14:fd:8a:1c:05:a4:4b:85:24:2a:bf:
         80:34:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:08:34 2024 by rpki-client on console-fra.rpki-client.org