Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa
File:                     dc54f9fe-204c-3e0a-9847-339c0c825f86.roa (raw, json)
Hash identifier:          o6+yMKW0tYouEWtqRnlle9WzYyVo+vpI6t1DA24q8kc=
Subject key identifier:   3B:DB:0D:56:06:B0:77:5C:69:DD:09:CB:59:36:D1:F1:87:90:E7:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D4868AAE42E7FD72B0040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     33661
IP address blocks:        96.110.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:48:68:aa:e4:2e:7f:d7:2b:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=ea2e7cee-9598-4244-854b-6c96f4ce8e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:73:83:88:32:8f:fb:16:72:93:e0:a0:88:
                    f6:07:2b:3b:b4:0c:c0:e7:dc:1b:73:9b:16:09:3e:
                    3d:97:dc:8d:4e:5e:8c:2d:1d:86:f4:1a:8d:87:ba:
                    0f:36:db:64:23:55:02:0c:97:47:0c:f7:c9:c8:f1:
                    e5:d2:88:1a:09:52:10:76:96:aa:a5:39:d2:b7:f7:
                    e9:29:03:1c:3e:7d:5b:26:c3:d2:b1:79:bd:b9:22:
                    04:26:c1:48:4d:e6:6c:c8:df:e8:9b:19:ca:7b:00:
                    c2:02:05:db:30:e0:da:c9:97:84:09:e9:23:47:88:
                    b6:a8:20:dc:42:df:55:7a:b5:33:90:cf:1b:fc:db:
                    4b:8d:1f:ce:35:d3:66:9b:eb:e3:96:bf:e3:11:66:
                    24:ad:97:f9:b2:a5:ea:fa:d4:da:b3:5c:43:74:1d:
                    55:b0:68:65:d2:65:6f:e2:6c:5b:d0:f4:2c:87:7e:
                    eb:92:7b:fb:d2:56:c8:03:be:4a:64:bc:42:32:98:
                    27:ad:e2:24:37:21:98:d5:9b:9b:34:34:bc:cf:10:
                    c2:c5:40:12:82:a2:82:06:51:92:04:b1:9d:b3:58:
                    ae:7d:7a:d0:52:aa:79:4f:79:86:26:ae:4d:48:34:
                    de:cd:89:c1:32:e4:b1:a1:db:cd:ce:06:e8:38:5b:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DB:0D:56:06:B0:77:5C:69:DD:09:CB:59:36:D1:F1:87:90:E7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc54f9fe-204c-3e0a-9847-339c0c825f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:50:38:5c:1d:e2:99:ab:78:c8:cb:db:19:69:c8:96:26:
         8c:01:00:16:82:84:51:aa:2d:97:45:10:52:32:4a:67:15:57:
         31:4b:6d:46:40:5a:62:34:02:60:ec:96:ba:63:ea:ea:93:24:
         08:7a:3d:17:4c:f5:c5:f0:b8:89:56:bc:7f:09:eb:a1:5d:26:
         2d:9a:07:df:f6:18:9a:31:43:ff:e9:2b:c6:f5:1f:65:f3:dc:
         f8:c7:ad:62:b8:9f:06:8e:ae:24:f0:6f:a2:80:04:85:8b:96:
         5f:cf:21:0b:40:2c:ec:e7:11:7e:ad:be:6a:40:f5:99:eb:8e:
         4d:4e:ee:63:95:5a:7e:4b:ae:28:e7:2c:09:19:e2:d7:ea:82:
         5c:4b:f1:4e:48:41:4e:4d:a7:41:8d:ff:b8:d7:0c:16:81:43:
         78:52:9b:81:ce:39:2d:bd:70:08:c1:8a:5d:fb:0c:f0:74:1d:
         ae:ae:97:f5:1c:68:9f:79:17:ac:a2:ac:b8:ba:56:24:08:73:
         a6:4d:93:69:89:09:e5:c3:f1:ee:42:6c:ce:a4:37:b9:d4:36:
         c7:3e:20:97:46:cc:f8:5d:59:40:95:e4:35:c4:5f:33:a9:4a:
         af:00:f8:2c:78:a5:c3:15:8c:15:1e:36:db:11:fe:9b:3b:fb:
         57:32:37:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:47:43 2024 by rpki-client on console-fra.rpki-client.org