Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
File:                     14fa3220-8306-3011-96b8-8816bcbee539.roa (raw, json)
Hash identifier:          99YC5z0VcCgggj2nOj8TPY5qBtvWn5jzKVoo1pzFB/A=
Subject key identifier:   6D:FA:DE:87:D0:55:D8:9C:43:E7:1F:81:95:86:93:40:DB:28:A5:42
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C530A5BCD15FC9B048280C0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     396247
IP address blocks:        96.61.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0a:5b:cd:15:fc:9b:04:82:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e7e0e14e-a99a-4496-a07f-69e1c529e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:23:9b:6c:a1:ec:33:51:58:50:cb:41:23:
                    8f:ea:63:d6:f7:bc:e6:d6:88:5e:2d:65:e2:18:6b:
                    3a:67:32:9b:86:93:f0:fb:ec:ef:7a:e1:7b:df:3b:
                    01:ea:85:7a:05:ee:e6:e5:08:9a:8c:d7:d2:20:b4:
                    45:57:0f:e9:a5:36:f6:7a:9f:ba:61:0e:5f:fe:56:
                    6c:22:58:73:1b:24:a1:80:44:c6:c9:d8:fa:92:aa:
                    28:99:7a:6b:91:76:eb:34:f6:6f:77:1e:2a:39:27:
                    0a:d8:d1:93:53:51:95:6e:62:e2:d1:b0:08:d2:fd:
                    dd:b1:aa:4f:96:16:d7:16:94:2a:8c:ac:4e:b2:0d:
                    c9:22:e8:eb:b1:59:dd:6a:0f:5f:07:b4:0e:36:d7:
                    94:84:be:8d:a0:0c:d5:4b:c6:6c:01:4b:b6:ee:6b:
                    a7:73:9c:2f:96:78:8c:3e:a0:d6:a4:5b:8e:df:ea:
                    40:c8:30:83:01:86:93:83:5c:16:c2:71:ec:a8:46:
                    41:e3:cc:5f:eb:e8:8a:0f:e2:2f:84:2e:4b:04:46:
                    56:b8:83:23:f4:78:87:b8:ff:c0:de:2f:b3:96:b1:
                    09:9a:8e:7f:91:05:4b:60:91:c2:71:e0:95:ea:2f:
                    69:d7:a6:9b:02:de:3e:e5:45:15:36:fb:32:81:02:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:DE:87:D0:55:D8:9C:43:E7:1F:81:95:86:93:40:DB:28:A5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.61.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c0:34:c6:ad:c5:c0:ef:cb:3b:7a:14:2a:2b:f0:4f:14:21:
         01:d6:8a:b9:29:5a:14:55:b3:17:be:2f:7a:96:5a:63:ec:eb:
         d6:38:e0:00:14:ba:44:ce:2c:0d:bf:7b:b7:a4:fd:74:b9:b0:
         50:b3:49:bc:4b:cc:b4:7f:f4:af:3e:14:5c:0a:45:50:c2:ca:
         0b:da:d0:6e:72:f3:f9:4f:60:eb:50:84:5e:8b:3a:56:1d:29:
         2d:07:20:25:02:2e:3b:7c:13:37:cb:0b:7e:80:a7:97:80:b5:
         64:aa:1d:19:8b:35:5f:86:23:0e:72:44:03:ab:45:de:39:45:
         1a:07:36:74:16:94:74:02:28:f1:12:3a:44:e0:7b:1f:c3:e3:
         06:7e:47:6a:eb:af:7a:8c:3d:cb:17:d0:39:c6:b6:8b:8c:a5:
         2d:70:cf:2c:6b:c6:42:05:ee:fe:d9:97:ff:f5:2f:6d:75:51:
         2b:e3:24:84:34:86:ca:1c:33:51:31:da:5b:35:3b:54:f2:90:
         73:49:f2:11:22:35:f6:a6:f9:54:11:17:82:10:fd:43:20:1f:
         5c:88:98:05:26:d4:45:6d:6a:17:80:74:52:b8:71:cb:c7:05:
         15:90:7a:ea:48:0d:50:53:ae:cc:89:fc:dc:06:35:61:ee:59:
         b2:ae:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:14 2024 by rpki-client on console-ams.rpki-client.org