Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa
File:                     b271f54e-4562-3903-9923-daf4d71d7d2d.roa (raw, json)
Hash identifier:          0LG2vRTl1FDE5bOzi5KIwZM7YJ7Ya9jcq6Aaf5h+0NA=
Subject key identifier:   1F:47:C6:ED:32:DD:08:B5:79:DC:D0:F4:3D:0A:2D:13:BF:3E:42:78
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858453FA80C27E785C5344A54D7C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     394487
IP address blocks:        96.2.221.0/24 maxlen: 24
                          96.2.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:0c:27:e7:85:c5:34:4a:54:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=85026147-41b9-4f47-ad59-492882241613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:5e:4f:41:a5:62:78:5a:62:ce:00:f9:7f:
                    c2:22:8b:77:84:46:62:23:e9:a1:8d:8f:0a:0d:c5:
                    eb:f0:a6:23:c1:7e:70:fd:60:1e:22:37:c7:a2:1e:
                    9d:07:2d:ea:90:29:3a:3e:48:59:38:ce:c0:a5:3b:
                    2c:d9:af:a6:d3:fa:cd:64:6c:c4:c9:55:ba:e2:8e:
                    80:61:92:17:7f:b0:b4:99:bf:f6:38:95:5f:0f:c4:
                    57:1e:70:ea:8c:81:12:ce:29:23:14:f0:b9:49:58:
                    8d:3e:b2:58:23:c5:74:e7:2a:b6:cd:da:73:33:f6:
                    a2:6c:19:40:5e:d9:37:cb:25:05:df:31:5f:45:86:
                    5f:30:f3:8b:c7:53:c7:16:cd:b2:72:36:94:61:71:
                    c6:48:dd:08:21:c4:98:c1:53:f8:ad:4e:7d:95:13:
                    7f:dd:c5:93:23:e5:21:4f:c0:be:38:fa:41:1f:8b:
                    c8:6d:2b:93:f1:63:90:3e:8f:0e:60:52:72:4f:ea:
                    a3:e2:8d:f2:a5:a1:00:53:2e:07:dd:d0:82:60:44:
                    b4:03:b2:a9:91:19:35:9d:91:e5:b1:11:4b:69:31:
                    8b:63:38:52:ff:e9:9e:0a:89:18:5f:38:0e:a7:6e:
                    05:6a:4b:a4:5e:4d:16:27:77:26:c8:a4:2e:57:ce:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:C6:ED:32:DD:08:B5:79:DC:D0:F4:3D:0A:2D:13:BF:3E:42:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.2.221.0-96.2.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:f1:7f:34:2c:9e:ac:43:72:fb:ba:2f:17:ff:40:74:7a:
         91:ab:21:46:16:27:44:2a:d1:e3:32:02:52:c0:eb:8e:6b:58:
         be:ab:1e:cd:ec:00:27:ca:1a:e6:42:5e:9c:3c:ef:97:40:1b:
         2a:55:8d:d7:ef:8e:d8:df:0d:1b:e8:e7:4f:af:e9:a0:d1:0d:
         b7:2a:1b:ea:87:2d:51:96:b4:05:1e:49:ed:97:fb:56:b7:11:
         4e:02:ec:69:42:9c:86:ac:54:4e:93:e0:ad:31:80:86:c2:63:
         ad:07:f1:ec:6f:64:76:d0:06:64:94:c2:45:14:74:30:c6:32:
         a7:f1:75:44:ed:d6:ce:31:d8:5d:37:72:fd:49:63:b5:a8:8b:
         fc:e0:4f:fd:dc:19:26:9b:d2:f6:65:9b:5b:9e:77:d4:48:33:
         37:8c:41:ce:aa:b7:67:cc:ff:6e:15:5e:5d:4e:d6:b3:ce:a3:
         55:b5:ea:be:30:39:01:18:e7:eb:c9:94:c9:1e:89:aa:39:ac:
         cd:d9:69:71:1b:87:52:65:f5:64:29:b0:cf:db:0f:06:08:4c:
         e5:04:48:ad:03:bd:63:4c:21:9e:dd:5e:65:25:49:22:ad:95:
         d1:ce:66:38:c4:dc:05:a2:80:5e:cb:c0:52:90:69:24:b3:32:
         c6:1b:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:13:40 2024 by rpki-client on console-fra.rpki-client.org