Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa
File:                     328acd99-4643-3ed8-b9f2-bab57c33866c.roa (raw, json)
Hash identifier:          Y1UsGcJ+2rubjU0YCR5rT01rXzQmNQ3C6WfhRDc+0D4=
Subject key identifier:   B5:5A:6D:5F:40:04:BB:A0:FB:77:B2:19:19:58:22:AB:72:1D:57:33
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C5317E7A19957DD443E8180
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     47039
IP address blocks:        96.61.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:17:e7:a1:99:57:dd:44:3e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=c46d063e-84fa-4a66-b61d-e8923b9f3609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:a6:13:9c:b2:50:55:d3:69:e0:c3:2f:60:
                    10:3f:10:7b:22:7a:9a:cf:03:f4:33:3d:da:e3:a0:
                    a6:43:0e:78:86:ec:a9:ee:a2:d8:a2:5c:43:de:16:
                    79:41:fa:58:73:f1:3f:d0:17:fe:1f:18:72:c5:a6:
                    bd:f9:8d:0b:27:a9:7e:98:15:62:01:88:a3:81:ac:
                    2a:1b:1e:74:74:65:0c:f6:93:97:13:cb:f5:97:31:
                    5d:32:dd:99:14:3d:7e:b7:c2:9c:62:82:10:0c:71:
                    01:53:d7:df:5b:3b:b0:3a:cd:fd:a6:ff:9e:a4:b7:
                    78:64:ba:02:11:5c:be:fa:ec:d9:79:2a:81:03:53:
                    e5:c1:d6:f6:e8:97:67:c1:aa:3d:80:dc:3d:2b:b5:
                    4a:02:d2:e2:d8:c4:c5:c5:2d:12:a7:a6:36:ff:22:
                    2c:3c:cc:92:03:00:24:b6:47:b6:ba:c6:d4:71:b8:
                    14:77:80:a0:23:05:c5:85:a4:39:db:9b:cc:0b:e3:
                    74:9e:9a:70:4f:cd:4d:d6:ac:59:5e:d2:c2:60:38:
                    51:16:3c:38:e3:b5:c2:f3:32:8f:85:e7:3e:66:84:
                    2a:f3:49:1a:2b:b7:52:c8:fc:26:e4:23:d8:12:46:
                    7b:f3:61:68:35:be:2c:83:a4:0e:1f:44:1a:9f:ee:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:6D:5F:40:04:BB:A0:FB:77:B2:19:19:58:22:AB:72:1D:57:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.61.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:b2:97:cf:6e:e6:58:e2:f9:27:ad:62:bd:b5:d4:eb:ee:5e:
         a4:22:ff:85:6c:52:6e:79:cc:44:6c:4f:c7:a6:15:f5:17:f2:
         ae:04:11:84:53:90:33:64:de:81:c2:39:3a:5d:74:2d:a8:7d:
         ad:d4:76:b6:aa:96:b2:30:d8:8c:b1:e8:67:41:ea:f3:84:13:
         4d:af:bf:18:44:f4:7b:2e:0a:10:21:b2:1a:e2:6e:6e:35:2e:
         57:5d:04:f6:83:0d:d4:d3:00:b6:bc:34:53:09:c4:6e:bb:7a:
         fe:bd:c6:86:60:60:17:2c:60:11:db:fe:5b:5c:40:9c:1f:8f:
         c4:57:d1:f2:d9:92:4d:e6:19:4a:ca:82:22:6a:dd:fe:bc:c1:
         3d:75:a8:6a:c7:c1:91:51:54:cc:09:f5:26:0e:37:9c:cb:70:
         1e:6b:0e:5c:b6:3b:62:7f:a0:00:6f:1a:70:fc:99:c2:11:84:
         76:bb:f6:53:f9:90:01:40:09:b0:b5:f4:7b:09:77:b5:68:e1:
         c6:08:2a:ee:da:37:91:1c:3b:6c:88:db:f3:de:dc:75:11:79:
         fe:af:63:3e:38:9c:65:3b:e5:2b:9f:9b:bf:dc:2e:7f:ef:39:
         51:94:c4:85:48:d1:f0:a2:d3:62:1d:51:3b:66:7a:c5:61:d3:
         60:c2:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:02 2024 by rpki-client on console-fra.rpki-client.org