Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47be962-00b8-34ca-a2d1-68e2ce5364f4.roa
File:                     c47be962-00b8-34ca-a2d1-68e2ce5364f4.roa (raw, json)
Hash identifier:          1T1TxbZzjiFYQrtgADBcJQVEprJK80gJ6Byrqw2EMGs=
Subject key identifier:   C6:58:15:7D:3E:7F:5B:18:D7:22:84:8D:94:6F:D1:81:8F:65:10:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0677D262044C642529F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47be962-00b8-34ca-a2d1-68e2ce5364f4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        96.109.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:67:7d:26:20:44:c6:42:52:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=27dec9d6-1998-4a1e-ba3c-3e59b30afeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:3e:28:98:74:07:92:6b:80:69:6d:84:80:
                    14:5a:5a:bd:af:07:35:1b:70:4e:d2:57:85:39:61:
                    ec:4d:76:39:1d:ba:2f:9f:1f:c6:39:3b:5b:5d:05:
                    a7:8e:4a:d6:0e:7e:31:65:7b:5e:79:b0:3c:e8:68:
                    69:d2:2c:08:f4:07:b3:e6:e4:3a:8c:10:c2:72:0c:
                    91:fc:ef:a4:90:99:fe:93:bd:8e:fc:01:52:38:9d:
                    6e:d7:1d:c5:f6:86:6c:99:8a:cf:a2:40:2f:7d:b9:
                    9b:02:65:0c:52:21:08:c4:a7:bb:fe:9e:d5:d1:7d:
                    7e:c1:44:d8:79:c2:8d:51:b2:b6:7f:81:b5:aa:be:
                    39:8a:d6:ff:64:fa:08:3f:8c:9b:2b:62:dd:b0:4b:
                    f2:c6:74:d1:45:00:e5:03:5e:d4:6b:b6:94:33:ca:
                    d1:c4:33:29:c9:ba:9a:d1:6c:08:58:5b:df:76:24:
                    b7:3b:f9:da:42:20:b5:89:1d:08:93:c7:ea:77:49:
                    bb:a2:49:f7:d7:62:00:e3:4c:0d:bf:97:b5:4d:85:
                    25:17:aa:9c:3b:4b:66:f6:7b:2d:a3:95:3f:9d:80:
                    fe:6b:10:ef:c9:7d:25:52:df:d9:6d:bb:58:d3:90:
                    b4:8d:b8:76:a7:77:a7:f2:9f:8b:b9:3c:4c:d9:b8:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:15:7D:3E:7F:5B:18:D7:22:84:8D:94:6F:D1:81:8F:65:10:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47be962-00b8-34ca-a2d1-68e2ce5364f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:03:d2:3d:74:ae:aa:07:8d:3c:c8:13:29:72:38:10:c8:50:
         d3:b9:ee:db:b2:cf:20:2b:d5:33:e3:f6:eb:71:86:74:f8:50:
         8f:e9:d4:84:a4:6c:fa:4e:5a:4a:f3:38:33:65:c4:00:3d:bc:
         c3:d0:bc:58:84:b2:87:62:b6:bf:09:0b:5e:23:73:cb:d7:65:
         2b:76:0d:3d:e4:c3:09:64:4a:b3:c7:fb:a1:6f:8b:3d:4c:d2:
         2c:c2:05:a9:1e:0d:a7:06:1c:fa:bc:6b:e6:b4:39:1e:b5:6b:
         3b:4d:6d:ff:2d:88:6c:5b:af:59:11:2b:34:3d:29:e3:bd:c3:
         b6:f9:63:f8:fb:0c:11:54:16:e1:00:9d:41:f9:31:e6:d5:22:
         47:cd:7d:3d:a8:45:cc:df:51:0c:b1:4b:e3:46:6c:e3:6f:f3:
         ac:50:2a:97:c3:19:12:26:ff:4c:c5:41:28:35:3a:d6:c0:80:
         6d:55:a5:16:07:f2:47:12:01:f6:64:15:12:01:a8:9c:ce:eb:
         c1:a2:03:6a:c6:46:ac:db:18:7a:6e:69:60:bb:ec:da:9a:b2:
         7f:81:33:3d:6d:d2:a6:5f:c1:e9:16:ef:19:b6:f4:fa:f6:40:
         4e:08:c7:15:06:6d:f7:64:46:da:c8:86:66:c3:6c:05:b1:82:
         6c:07:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:21:50 2024 by rpki-client on console-ams.rpki-client.org