Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
File:                     5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa (raw, json)
Hash identifier:          IQh/1j/eDjqXg0S5g5JfRUWsUisSeXFAzsh9GFfTm9w=
Subject key identifier:   A1:7D:BD:E0:32:E4:04:80:07:FB:A1:CA:5B:BC:E9:E3:0D:E0:F2:2E
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858457FDDC7DB61E71BA135E72500
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     32889
IP address blocks:        96.60.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:c7:db:61:e7:1b:a1:35:e7:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=b9e10373-346d-4a97-9ea5-9ca4c40d1af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:66:2d:98:70:2b:b0:c6:86:0d:1c:b8:17:
                    d6:68:f1:c2:c8:8b:ec:51:45:33:9b:c6:ec:ec:07:
                    a7:81:58:5a:6e:52:0f:df:52:a9:85:b0:0c:bd:1c:
                    e0:e1:ee:d9:67:d9:c5:aa:f6:91:8d:4a:ee:da:d1:
                    f2:10:cd:fd:23:a3:8a:49:db:58:3a:03:9f:92:ff:
                    dd:8e:b9:20:6e:ed:fa:b9:43:bd:89:22:01:24:b9:
                    67:ae:f0:ef:80:f7:1e:6a:a0:b5:c0:42:ef:fa:65:
                    ca:08:af:d9:68:f9:24:e4:97:22:17:ec:b6:51:06:
                    c1:52:8f:c9:8a:df:b5:27:e8:53:ff:bd:61:09:96:
                    c4:3e:cb:c8:a4:c8:14:9a:ef:bc:be:8c:a1:01:e6:
                    6d:1f:16:40:a7:13:c6:70:4a:19:89:3d:28:58:6b:
                    c3:d0:44:36:2d:6d:4b:32:36:69:88:d7:50:05:40:
                    25:c8:b8:b9:d8:74:70:39:4b:96:c9:a3:44:c8:a9:
                    b9:e4:f0:93:b6:bf:95:13:74:f7:1b:da:28:70:2a:
                    cd:b3:94:60:32:cf:d0:9e:5a:f4:40:a5:6b:2a:32:
                    f9:c8:ff:d0:7f:1e:77:a2:5c:2e:71:90:d9:c1:a7:
                    68:46:e7:6c:9d:06:98:73:18:a2:02:55:77:fd:21:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:BD:E0:32:E4:04:80:07:FB:A1:CA:5B:BC:E9:E3:0D:E0:F2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.60.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c9:2d:88:e8:c5:3f:6d:85:08:01:a0:11:fa:82:f5:b8:79:
         1d:95:80:c2:23:97:92:a5:1a:4f:5c:40:75:59:fc:df:05:5f:
         dc:90:2a:18:9d:b4:e2:ab:28:07:79:6d:d7:ed:10:fd:da:0c:
         dd:fd:6c:1b:19:9b:02:1d:40:25:1d:22:dd:e8:63:2c:e5:b7:
         c9:20:5d:81:fb:98:89:bf:d8:cf:9a:c1:38:f7:64:24:5b:b6:
         47:4a:27:5f:3d:dc:5e:6f:d4:af:c1:03:a9:2e:55:30:f5:3f:
         78:ec:88:ab:ac:51:13:ec:60:31:f3:88:70:94:b6:cf:c9:75:
         52:81:9b:3c:0e:f6:b6:3a:65:d9:61:1f:bd:f4:94:7a:12:6b:
         56:23:8f:b6:7e:22:91:5d:b0:ee:c3:bf:e4:04:ac:88:ad:00:
         e2:19:fd:53:e0:63:53:5f:c2:9d:bf:38:b4:25:60:27:4e:50:
         ca:fc:46:45:7e:e2:c6:fb:e9:5c:f6:6b:e9:9d:09:77:aa:bd:
         f1:71:c9:43:07:a4:26:eb:69:ea:d2:93:79:97:5b:13:3e:05:
         e8:4f:aa:3e:17:56:09:fd:0a:32:24:af:37:88:11:f0:54:97:
         62:25:60:7a:f9:14:20:61:05:e5:6b:94:70:6b:50:a7:78:a5:
         cb:8e:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:02 2024 by rpki-client on console-fra.rpki-client.org