Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9e9626-eb54-3cb4-b40b-175cfc0417f4.roa
File:                     fc9e9626-eb54-3cb4-b40b-175cfc0417f4.roa (raw, json)
Hash identifier:          baXW0NDkoSCLeb9vPB2jCSENw9SvMZClWVmZWwRZg0A=
Subject key identifier:   2A:E6:4E:50:77:3A:C2:E7:45:A0:D7:8C:A8:01:31:63:83:5E:86:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABC206139D4A8F7D8417C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9e9626-eb54-3cb4-b40b-175cfc0417f4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33668
IP address blocks:        96.88.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:c2:06:13:9d:4a:8f:7d:84:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=614eee76-56cd-416f-8140-55eca2bc94ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:cf:50:1a:83:db:a6:72:47:40:43:87:01:
                    b3:9d:4f:e1:1d:1a:e5:61:3d:eb:6d:e5:d0:a5:8c:
                    9a:7e:51:4a:ae:49:dc:25:f3:a1:2f:56:49:0a:89:
                    29:e3:fa:5d:f5:17:4a:7d:8e:bd:51:31:7e:ef:90:
                    c6:37:1b:48:b0:06:08:5d:13:00:9a:c3:cb:6a:dd:
                    f6:90:58:45:ea:9f:b8:6e:97:c1:a7:e6:ae:29:cf:
                    29:51:c2:1e:2f:78:e6:fb:0c:75:7e:01:5e:41:b6:
                    ef:7b:73:67:d5:06:28:91:8d:95:1b:fa:e1:7a:77:
                    8c:b3:52:90:3c:88:7e:b6:52:21:32:eb:fc:54:27:
                    ea:66:1d:98:d9:27:bc:14:9b:8c:25:a1:7b:ab:b4:
                    fc:72:b2:3a:9c:64:ea:90:93:c2:a3:f5:2c:5a:f3:
                    d4:a1:67:c9:e0:80:87:c4:57:d4:95:21:e5:49:3b:
                    4c:ec:15:bd:8a:b5:d8:07:6c:d2:00:04:a9:da:73:
                    8f:63:4b:d8:0f:c4:2a:22:3f:33:69:16:7c:26:d0:
                    a4:3d:61:48:0f:6b:97:83:d3:59:8e:d7:11:42:a2:
                    0a:bc:4f:34:ef:f6:ae:b7:b4:1b:c9:bf:b0:dc:16:
                    b2:30:b6:a6:47:01:13:7f:26:af:93:ba:57:4d:56:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:4E:50:77:3A:C2:E7:45:A0:D7:8C:A8:01:31:63:83:5E:86:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9e9626-eb54-3cb4-b40b-175cfc0417f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.88.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:33:ec:da:54:bd:4d:68:30:76:38:28:84:e8:46:64:0b:
         5f:2c:aa:bd:f8:b6:11:45:27:46:b8:1f:0d:87:4d:2b:e4:9c:
         eb:37:ce:7c:19:a0:ca:dd:c7:cb:44:dd:37:f9:d4:43:56:d8:
         c7:dd:0d:69:81:22:f5:1c:ef:78:11:68:bd:31:85:bc:7e:bb:
         9b:4c:82:6c:dc:d3:11:67:8e:5d:71:98:52:ca:cb:e1:9d:6a:
         6f:93:de:c2:2b:9d:a9:20:02:95:43:49:40:1b:9b:bd:4f:b3:
         9e:b0:46:cc:f5:25:7f:f8:48:52:9c:2e:1b:41:eb:32:29:5a:
         c4:67:a5:a4:09:fd:6c:1b:d9:68:4f:57:fa:80:b8:60:f9:ad:
         1f:96:cc:51:ef:33:ab:a1:4b:2e:d5:f5:d9:4b:d8:1a:61:3a:
         01:61:43:44:97:e0:12:de:3d:1e:e0:ea:2d:b2:55:eb:c9:02:
         2b:43:48:b1:aa:03:13:55:6f:0e:6a:df:5f:8c:4c:70:75:73:
         0c:37:87:f5:4b:83:6e:62:64:f1:99:85:a2:2e:46:e7:92:ae:
         bb:30:77:ac:bd:5c:1b:30:51:b0:3c:fc:8b:c5:a6:d7:91:b2:
         b7:62:b5:e1:fd:46:85:44:bd:b7:35:87:26:f9:7b:26:26:1f:
         f7:b3:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:41 2024 by rpki-client on console-fra.rpki-client.org