Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d912522-4dfd-35fb-bbe2-4fe9b7ccbc6d.roa
File:                     9d912522-4dfd-35fb-bbe2-4fe9b7ccbc6d.roa (raw, json)
Hash identifier:          DWJv6OnwfN3tPyrLGkK1hBkSpQAqc8XzEbEmr7W5wVs=
Subject key identifier:   C8:5E:A5:59:76:37:70:4D:0A:5B:AF:4D:06:D0:20:62:E2:CC:81:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAD91506F7D01DE4B27A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d912522-4dfd-35fb-bbe2-4fe9b7ccbc6d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        96.109.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:d9:15:06:f7:d0:1d:e4:b2:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=43136153-327a-4b78-8000-e8e87a4db7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:00:89:53:bd:79:ec:80:19:d7:8c:66:3d:
                    bc:e9:17:e0:bb:54:73:51:a5:d6:9e:31:29:9a:64:
                    6b:65:3b:99:0a:c1:28:72:55:9a:ef:00:63:79:1b:
                    05:ef:52:fd:e3:b7:ed:f2:dc:08:7b:2c:12:4e:3d:
                    19:9d:93:e2:d0:c0:e7:62:be:a1:ca:5c:90:1e:14:
                    93:af:86:15:fc:8d:b8:1a:eb:84:19:ab:b8:75:ec:
                    f9:5d:2e:af:ed:46:18:b0:a7:51:64:93:27:39:f9:
                    0f:2c:47:bb:cb:98:4f:37:f6:c5:7e:1f:23:64:71:
                    c5:8f:0d:af:be:9c:00:0c:64:8f:16:8b:50:b4:74:
                    dd:52:7f:da:99:e4:88:5c:22:9e:b9:1f:f2:6e:c2:
                    54:c7:90:f5:dd:20:11:12:7a:64:b2:f0:be:d8:25:
                    34:9a:f9:fd:45:d2:9d:28:4f:48:45:f5:f5:36:51:
                    f7:c2:5c:e4:4d:87:93:15:db:33:fc:3d:3d:35:9c:
                    74:d0:4e:68:a8:63:f2:6e:dd:9f:8a:b6:20:d5:01:
                    e3:27:37:94:31:e4:c7:98:f4:e6:1d:d3:98:2e:b9:
                    58:89:98:bb:ca:71:0c:5e:3f:e7:a3:07:c7:f1:94:
                    fd:b5:51:71:fd:28:0b:7c:11:72:ce:85:20:a3:fd:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:A5:59:76:37:70:4D:0A:5B:AF:4D:06:D0:20:62:E2:CC:81:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d912522-4dfd-35fb-bbe2-4fe9b7ccbc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:e9:4a:f1:bb:f2:bb:7c:9e:03:1c:55:e7:3f:03:e0:2d:
         02:1a:0e:07:78:78:18:fd:4a:5e:72:3c:10:35:c5:3f:b5:0d:
         10:f6:be:aa:53:d3:8a:0c:40:32:be:0f:07:52:9b:c3:0e:09:
         20:5b:2d:19:4e:4a:ca:55:e7:fa:5c:e9:5d:31:9c:1b:51:1d:
         43:21:da:5d:70:19:de:39:20:a9:81:c7:a6:c3:59:3e:e3:a3:
         a0:00:7e:c9:c9:65:1d:6d:f4:89:7a:3a:c0:af:d7:e8:35:e0:
         5a:43:4d:df:78:68:da:ed:c2:57:aa:67:dc:80:ac:00:7f:86:
         ec:12:9e:15:8d:30:36:92:5e:32:34:36:df:4e:df:5f:83:40:
         9b:69:96:9c:78:5e:83:e0:05:bc:8d:f7:6c:6a:ca:78:40:56:
         b8:a7:ad:8b:b8:bd:be:ef:41:c5:c5:95:3a:79:a4:21:1f:03:
         5c:76:cb:28:d6:66:48:dd:cd:ab:6a:d9:05:cc:ab:05:04:7d:
         bd:45:e2:f0:d2:38:c2:06:92:07:d1:76:52:11:12:18:a9:0b:
         0b:b3:dc:6d:92:ed:2c:c6:1e:f9:b0:02:9c:d9:d6:9e:73:36:
         96:30:72:97:46:6e:ac:a4:26:33:fa:4e:f6:6b:4f:0c:58:bd:
         72:60:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:30:58 2024 by rpki-client on console-fra.rpki-client.org