Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
File:                     6bc9518c-92df-3fa7-8157-1b414d300f26.roa (raw, json)
Hash identifier:          /EGr5YJmXeV4dp1FaqO/FMGr/zmaFy9w9jDgzyJ70Zo=
Subject key identifier:   27:94:FA:7B:3D:86:98:B1:2E:95:76:67:1B:BD:DC:85:8A:7E:81:83
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285845612853688C847479DEA45810
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     16509
IP address blocks:        96.9.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:53:68:8c:84:74:79:de:a4:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=789a09d6-dd81-46fa-99b7-834b2a02a017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:08:f1:7f:fb:73:79:2a:f9:a5:27:5e:f3:
                    a7:65:f4:bf:97:f6:4d:a9:0b:38:16:a0:f3:80:ed:
                    ef:19:35:ab:ca:75:8e:54:bb:f6:57:49:2d:66:c9:
                    0e:af:79:eb:73:09:0b:96:9d:22:ab:a3:eb:83:f5:
                    9d:76:36:ec:03:82:37:92:8a:4f:04:bb:1e:cd:ea:
                    01:40:fe:bb:5b:d1:b9:09:dc:5c:16:12:45:9f:01:
                    a0:7e:d4:c6:ee:81:c4:9c:59:83:ed:f4:4f:76:a7:
                    74:a7:b8:8b:81:c1:cf:cf:2b:57:bf:c7:8b:f3:59:
                    95:dc:5a:52:06:e9:ed:3a:76:91:77:0b:f7:88:a0:
                    c1:97:4f:3a:76:7b:9c:a8:53:80:18:c2:cc:69:a9:
                    1b:39:f2:09:4b:13:68:d2:56:02:f5:90:82:80:63:
                    43:d4:ef:56:e2:ca:46:43:e7:a6:d3:00:e5:29:ec:
                    0c:f3:33:96:ae:c0:6d:09:b6:90:e6:a5:2a:81:d0:
                    a7:0a:9b:13:ac:f6:b6:46:8e:2b:d8:a0:e8:77:09:
                    a8:a3:e5:37:ef:e6:4b:27:3a:77:f1:c0:36:4d:bb:
                    3b:91:5f:88:92:db:77:0e:f8:2f:12:f5:30:f1:60:
                    d4:ac:1a:8f:e1:14:5e:31:12:0d:c5:e5:a9:3e:ff:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:FA:7B:3D:86:98:B1:2E:95:76:67:1B:BD:DC:85:8A:7E:81:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:8a:3b:9c:1b:93:df:d0:25:60:46:22:c4:12:39:2f:2f:
         91:a6:a2:87:e5:bd:e8:fb:23:03:e8:2c:a9:fa:73:b1:79:60:
         78:af:6a:47:19:45:ee:a4:a0:35:1d:1c:a0:63:3a:02:a8:f2:
         6d:9a:bd:52:2e:57:c8:26:66:87:6e:91:57:9a:ff:01:cf:52:
         a2:8f:0d:0c:c8:50:af:d9:f2:9f:9d:1d:75:03:27:cf:42:10:
         7d:48:80:7b:2c:5b:7d:b4:18:54:d4:bb:91:95:0d:e0:98:04:
         a2:ac:94:23:7d:a2:82:83:f1:5e:8d:b3:e1:c8:1b:45:fc:48:
         96:d9:3c:10:c8:22:9f:29:db:5d:db:b2:8f:d4:ab:ad:a5:62:
         a8:30:ce:03:18:5c:94:11:5c:e4:e6:fa:7c:fe:24:0b:2e:54:
         34:97:74:f7:b0:ac:73:8f:1d:f9:81:5e:e6:bd:fd:aa:c2:09:
         6e:d0:6b:6f:3d:6d:92:ea:64:24:db:1a:1c:64:f0:f1:89:3f:
         ff:23:39:e5:81:e4:64:29:66:73:80:f3:0e:ac:0f:91:d2:94:
         10:91:18:ac:1c:1e:c0:a0:e0:84:31:52:d8:a7:f0:9b:8a:54:
         ed:f8:b1:02:7f:df:cc:7a:93:fb:98:8e:1c:2e:72:ae:c3:4d:
         05:5d:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:49 2024 by rpki-client on console-fra.rpki-client.org