Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa
File:                     bd53a3c2-b425-32de-abae-cbb2ab87890a.roa (raw, json)
Hash identifier:          7ocmdzsvUcGllFZ2+zgxB0IeLjKUAfNG/aqPN1QuwjE=
Subject key identifier:   1C:79:FD:D5:56:9C:C2:B2:08:BF:4C:2D:90:52:E0:7F:CE:24:F4:95
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F43285846BE3D771F230BDB16FE7EF300
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa
Signing time:             Fri 02 Aug 2024 14:00:27 +0000
ROA not before:           Fri 02 Aug 2024 14:00:27 +0000
ROA not after:            Thu 31 Oct 2024 14:00:27 +0000
asID:                     2055
IP address blocks:        167.96.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:be:3d:77:1f:23:0b:db:16:fe:7e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: Aug  2 14:00:27 2024 GMT
            Not After : Oct 31 14:00:27 2024 GMT
        Subject: CN=4f8e57cf-6b71-48aa-a5e5-feecfa1824ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:d5:78:96:f0:5e:d4:bb:56:11:21:75:18:
                    55:11:c9:05:f9:c3:5a:d7:1e:d7:71:0d:7e:05:2d:
                    8a:5e:51:6f:ed:14:fe:8c:49:ab:a9:2b:50:38:72:
                    09:4a:7a:23:54:62:41:29:05:25:3d:95:18:4f:ce:
                    aa:19:64:41:75:2b:cb:f8:a2:e8:4f:8b:53:d6:d9:
                    e7:7b:75:f4:ac:10:58:e5:fb:77:b0:df:b4:0a:16:
                    aa:bf:0b:7e:a0:ac:43:cc:9d:23:c8:40:52:9b:4b:
                    06:86:1c:73:ee:39:72:d1:9f:a9:ba:58:00:98:98:
                    ae:36:fb:91:c0:56:5a:b2:f2:80:1a:eb:83:f0:ca:
                    a2:c3:c7:8f:c9:3f:13:04:e8:91:d9:d2:cb:5d:1b:
                    20:35:2c:4c:28:83:20:28:cc:a4:74:e9:b1:b3:54:
                    37:c4:2d:ba:c2:fb:21:50:da:74:ed:8c:64:6e:7d:
                    da:20:60:28:af:31:92:5f:6c:fb:ca:b3:0a:bc:d5:
                    e4:73:27:df:26:ef:8d:d9:95:f5:7a:49:11:e8:c1:
                    75:40:bb:21:19:9a:a7:35:c1:45:3e:5d:26:bd:fa:
                    59:c2:a4:e9:38:f5:69:31:f7:1d:46:35:4b:cd:3e:
                    f4:5d:af:37:48:87:02:b4:4f:11:c9:71:a0:61:2f:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:FD:D5:56:9C:C2:B2:08:BF:4C:2D:90:52:E0:7F:CE:24:F4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:a1:46:2e:1a:34:48:85:2c:c6:68:fe:3b:30:f8:04:7b:
         95:22:a2:f0:b6:c2:0f:66:c2:82:13:82:4b:38:af:1f:24:09:
         9c:ab:50:b4:b6:96:2a:c7:5a:6b:55:fe:7a:bc:cb:df:2b:ee:
         5c:d3:1d:da:64:bd:1b:34:ff:32:55:f2:9a:f4:ed:78:ba:4e:
         d6:a8:65:ad:72:33:90:5b:17:48:e7:b6:9a:4a:6c:75:b7:70:
         f3:a8:83:b8:d2:a4:58:78:47:2d:ba:cb:b4:98:5e:69:e1:b1:
         36:43:a8:11:54:44:2f:f2:8f:67:91:c9:df:36:62:96:02:61:
         a2:55:cf:51:3b:b5:7f:53:bd:0b:00:c9:5a:f0:2c:12:ed:46:
         19:75:1c:b3:8e:e7:4d:57:4d:6e:1c:08:40:c9:56:3f:95:8e:
         1e:1a:b2:5f:d3:c4:dd:a4:2e:4f:88:bc:0e:6b:a3:e9:f4:cc:
         61:f3:36:41:f6:10:96:56:51:a2:10:b9:2f:e7:0e:8f:39:90:
         3e:3b:af:93:b7:16:8c:12:5f:d5:62:e7:db:9e:d5:51:a2:2b:
         1f:d8:32:93:48:1b:26:84:e4:7e:e6:e1:e9:d6:ce:d0:b8:08:
         d9:04:62:39:98:07:a1:6d:a3:e0:7a:e3:c9:0b:07:98:14:87:
         6f:7d:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:29:05 2024 by rpki-client on console-fra.rpki-client.org