Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa
File:                     d8255ef3-7706-3e51-8d86-5efb91628a5e.roa (raw, json)
Hash identifier:          NNHF/MDYfrfX26Agvv2d/KFKFisBQX8qBVdfdPdXD1o=
Subject key identifier:   9C:EF:A5:3A:4C:4B:A8:53:09:FF:07:57:ED:B8:60:43:1D:89:75:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB769E6D1871DF9D662C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22258
IP address blocks:        96.71.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:76:9e:6d:18:71:df:9d:66:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1ebf257e-6454-4df5-8dab-1ca6f13d1285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:37:10:54:00:3b:a4:5d:7d:dc:09:b7:a5:
                    93:d3:1e:ad:22:a2:02:54:d2:d4:c6:b7:c7:9e:eb:
                    ca:69:18:af:53:45:da:ea:f0:bb:f5:16:b2:b1:4d:
                    c5:fb:b9:9e:4c:da:a2:ac:a2:af:39:48:b7:f2:f8:
                    ca:8a:82:09:99:39:35:54:b7:c3:d6:1e:bd:59:66:
                    ad:4b:e9:91:6c:78:5b:84:d6:2c:c9:f1:72:b3:2e:
                    d2:e8:f8:53:18:2c:32:a8:b7:f4:56:65:03:de:d5:
                    18:46:a3:3c:a0:63:e0:53:ad:c5:b8:b8:2f:92:75:
                    1d:26:c0:3e:5d:40:0f:21:31:ce:f3:a5:3d:6d:bd:
                    5d:b1:cf:75:69:e7:3e:82:fd:79:7c:8c:09:20:d5:
                    e3:b3:93:02:42:77:bd:47:b4:67:e0:1f:bc:2b:49:
                    3f:1b:22:c6:a3:24:cd:e6:e9:8a:79:64:a3:d8:33:
                    2e:0e:d8:84:cc:f3:20:4d:9e:91:4b:d7:c7:bf:f9:
                    ff:de:89:6d:df:16:1f:7c:16:01:f8:c1:8d:ad:37:
                    5b:db:de:04:d2:0b:f6:f6:b5:78:f2:44:52:02:a1:
                    4f:56:35:72:92:51:14:90:76:c7:98:d8:84:91:f2:
                    3a:74:4d:f2:e3:7a:5e:64:da:49:e4:aa:ac:37:88:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EF:A5:3A:4C:4B:A8:53:09:FF:07:57:ED:B8:60:43:1D:89:75:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8255ef3-7706-3e51-8d86-5efb91628a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.71.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:e6:d5:8b:45:a4:d6:58:eb:51:7c:9f:5d:fb:8d:70:00:
         1c:0e:3b:12:45:86:2e:8c:38:88:b7:20:5e:06:11:d8:12:c2:
         40:83:d5:9b:06:4a:26:22:f6:c3:e7:e4:93:14:ff:e4:65:a8:
         7b:a8:54:9b:f5:10:43:65:a7:bb:de:3c:c9:09:07:ac:cf:87:
         14:76:94:98:44:cb:e8:bd:fe:6d:bc:bd:e0:e7:57:ba:27:49:
         de:89:ef:44:6f:0b:e7:b1:09:00:db:57:15:e3:31:de:2f:48:
         33:02:32:24:fa:07:a3:2f:c9:40:58:ef:0e:48:46:55:1b:70:
         47:92:d4:30:6a:27:c1:51:c1:a3:22:86:45:d0:b0:07:bd:51:
         c9:50:55:4c:e7:db:4f:58:4c:82:97:ec:8f:d3:43:82:79:45:
         b8:8b:c1:a3:48:c6:26:5e:46:5f:56:dc:ac:67:bd:a1:89:59:
         b0:6e:d8:f2:db:b6:05:ca:a7:94:05:31:3a:7d:5c:51:9d:4b:
         19:9f:ae:5a:1d:e1:13:19:d9:43:c6:4f:5f:17:12:5f:6c:3b:
         a6:4f:9c:67:73:e4:d5:f2:d9:f2:f0:6f:34:02:38:60:00:27:
         7d:19:01:ae:97:70:de:97:26:e5:0d:96:80:f6:4c:1a:2b:78:
         27:0f:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:45 2024 by rpki-client on console-ams.rpki-client.org