Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51e13eb-c10e-32fa-a23f-28452bedc97a.roa
File:                     a51e13eb-c10e-32fa-a23f-28452bedc97a.roa (raw, json)
Hash identifier:          R5HWOwOHBIIXlBkUiX17RhzqtpEnmK+8Zq3N6Kl7ps4=
Subject key identifier:   15:C3:3B:2E:60:FD:29:14:44:DB:D2:19:3D:20:42:7C:15:10:EB:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0670CE772B55535D5FEE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51e13eb-c10e-32fa-a23f-28452bedc97a.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        96.93.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:67:0c:e7:72:b5:55:35:d5:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=05678c1c-6804-4944-b529-de79162be3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:71:44:6b:55:5e:e9:47:b5:03:34:da:0b:
                    45:55:3e:f2:cd:4d:05:6d:31:82:b0:fa:7b:e2:a3:
                    61:36:9e:7b:ef:d1:6f:97:c7:3c:61:a7:9a:96:fd:
                    c4:af:87:20:fc:a2:36:2d:1f:b1:ae:98:bf:39:6b:
                    0e:ba:bc:26:e1:c9:bf:5a:47:ee:1c:1f:7a:80:78:
                    57:9d:08:76:ae:4f:7e:85:31:80:74:3a:f5:56:0c:
                    1a:d4:a4:7e:7e:8d:46:d8:c9:1b:ee:b9:6b:26:e1:
                    e2:bd:0b:bb:bf:5a:73:90:eb:90:26:4f:3c:81:b6:
                    04:5c:41:c3:57:47:24:5e:2b:3e:87:f7:2b:53:08:
                    70:6d:d2:94:04:39:ee:60:2f:aa:da:0d:81:5d:8c:
                    52:e2:89:9a:db:4c:d8:a4:c7:67:5f:f5:d4:58:67:
                    c9:ef:04:a5:d5:04:53:bb:c6:c5:19:0c:c5:15:6f:
                    61:e5:1a:b6:93:62:ee:4b:44:de:36:9a:2c:86:58:
                    5a:0f:05:c7:ae:28:47:0b:37:4f:3e:fd:5a:36:46:
                    f9:ed:8f:7a:f3:80:4d:bf:78:fd:c5:d6:5f:d3:d6:
                    46:21:72:f2:0c:4e:68:97:12:9a:90:9c:de:35:28:
                    9a:40:f0:72:a7:48:6a:c2:40:38:7a:d7:c7:94:78:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:3B:2E:60:FD:29:14:44:DB:D2:19:3D:20:42:7C:15:10:EB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51e13eb-c10e-32fa-a23f-28452bedc97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.93.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:95:a4:9b:5e:0d:a8:65:07:6b:82:d8:34:c7:9a:ee:14:
         3f:17:6b:1d:ee:0a:98:d4:45:16:3c:60:02:73:3a:1a:b7:d6:
         52:46:d2:eb:c2:76:8a:53:14:60:4d:cd:55:84:eb:64:bc:80:
         2f:60:59:48:e9:bc:6c:b4:30:11:8e:34:ff:f6:33:ad:ff:0b:
         37:af:51:61:0b:ba:20:45:fb:91:8f:61:b4:e2:31:64:8e:de:
         59:80:38:e9:c5:82:e5:d2:a1:ab:66:a2:8a:17:20:7a:50:95:
         25:14:2d:e8:bb:43:90:97:9a:20:2c:38:88:5a:c1:29:fe:c0:
         bd:f6:f6:05:ed:e1:64:98:0d:5b:f2:c0:e4:7f:42:c5:ad:0b:
         a8:b1:e1:62:1a:36:2f:a7:f9:db:3d:6f:f5:d1:c5:b2:3d:61:
         8f:ea:a5:e5:db:34:50:31:d5:9d:36:08:ec:42:0d:ea:fb:f2:
         12:47:96:19:e8:4a:da:50:9e:21:b2:20:9b:1b:19:cd:62:70:
         65:08:e2:da:de:9a:a9:d6:ab:b7:fb:70:08:0d:b7:9b:15:99:
         a2:3d:10:e1:b7:db:b3:bb:e5:60:8c:f7:7d:aa:f0:00:a1:9e:
         42:ea:60:0e:85:7a:ac:d1:ce:79:e6:fb:3b:4f:69:2b:04:94:
         01:21:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:23 2024 by rpki-client on console-ams.rpki-client.org