Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c988c1-6cc4-394a-a14c-f2de44e9f166.roa
File:                     c2c988c1-6cc4-394a-a14c-f2de44e9f166.roa (raw, json)
Hash identifier:          AgGs6U0xr+KsInAMxABaaQ0m63pC1BAGxKKPO09Ilew=
Subject key identifier:   07:CF:88:95:AE:27:22:87:39:09:B5:6B:7D:4A:4B:93:B0:64:08:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB6223BCFB5AE964943AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c988c1-6cc4-394a-a14c-f2de44e9f166.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     20214
IP address blocks:        96.110.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:62:23:bc:fb:5a:e9:64:94:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=486235cb-ec24-4e8e-a39c-8ed2ba261cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:8a:5e:11:7f:96:77:74:c1:ce:48:b3:f7:
                    6a:b1:ef:3f:94:ec:60:5e:1c:88:40:92:05:90:a0:
                    89:37:84:3a:96:8f:7d:ba:5f:92:fe:ff:f6:2c:65:
                    a9:1c:9b:10:70:9c:74:07:59:f3:fe:8c:b9:1e:06:
                    6f:87:c3:f2:55:74:c1:44:12:1a:99:f3:97:18:c7:
                    c8:c2:cc:4d:cc:71:6a:52:33:01:f2:fa:09:98:da:
                    30:8f:2e:27:e7:59:69:9d:81:dc:b6:af:c5:e2:d4:
                    de:f5:97:7e:3f:31:37:90:3c:a1:1a:4a:6c:59:3b:
                    d0:b6:b5:ee:07:0a:9e:15:11:c7:55:e0:61:c9:cb:
                    df:70:9c:97:bb:6e:c5:51:40:09:fc:92:0f:64:8a:
                    a1:94:67:c0:7c:8b:93:69:6e:d6:6b:0d:1b:55:2c:
                    cd:32:fd:9a:65:73:ee:f5:66:4e:c9:72:67:65:3f:
                    45:95:28:28:9d:6f:99:4c:45:15:fd:7d:c0:2e:72:
                    a8:9f:85:10:34:bd:e9:1a:54:39:2b:ab:71:08:2a:
                    82:eb:02:4f:94:82:dc:e6:f9:c6:e8:a3:69:ae:bf:
                    28:f6:67:94:46:d7:22:0d:88:19:f5:ef:c5:83:2d:
                    d8:24:42:ca:15:be:65:b1:1e:9a:32:fd:ab:e2:36:
                    69:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CF:88:95:AE:27:22:87:39:09:B5:6B:7D:4A:4B:93:B0:64:08:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c988c1-6cc4-394a-a14c-f2de44e9f166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:e0:85:0b:58:53:90:b9:7f:70:cc:17:68:51:0a:a4:48:
         0b:7e:05:5f:04:b2:b4:4c:f2:79:d8:2e:41:a0:cb:6e:42:90:
         e6:74:56:fd:1a:7c:56:9e:19:9f:d5:b9:5b:3c:f5:b7:06:31:
         d5:09:4e:12:9a:97:99:02:d0:96:92:d3:73:04:68:00:86:19:
         34:04:2b:e2:6b:9e:10:ed:30:f6:e7:80:eb:be:d9:8f:a8:20:
         fa:9f:2d:a6:71:c5:67:0e:2c:8b:02:3f:9e:96:ca:71:cd:2d:
         3e:8d:72:4c:b7:46:58:a3:27:1e:43:6c:0f:5f:c1:f6:09:09:
         ea:6c:86:a4:0e:e6:fd:cb:a5:56:61:62:d0:49:da:37:ce:8f:
         88:a7:a6:53:e9:02:db:24:77:87:93:35:8e:24:cc:6f:e2:ec:
         2c:de:80:76:8a:9a:45:4f:a7:af:fe:80:0b:76:8e:fb:ff:34:
         ef:0a:f6:f5:12:f4:1c:57:09:06:0e:b7:09:25:44:08:fb:f2:
         c9:9d:c5:4d:11:37:48:0a:13:37:4d:0b:3c:9a:8a:8e:31:e6:
         7a:47:c7:ef:fd:8f:6b:60:9b:e8:f4:bb:fd:65:c1:66:a6:f5:
         7b:fd:47:9e:9d:ff:f1:51:5c:95:8a:9b:57:d0:1e:a2:2d:72:
         21:1a:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:21:46 2024 by rpki-client on console-ams.rpki-client.org