Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/06aed063-8d0a-3cff-9147-3992f5aa8b36.roa
File:                     06aed063-8d0a-3cff-9147-3992f5aa8b36.roa (raw, json)
Hash identifier:          GtrwMni7TEKB7ER1ftoAWbDvQUNNDM8fd2km+gmmKV0=
Subject key identifier:   A1:EA:FA:1E:4B:E8:4B:BA:7A:B5:4E:D2:91:6D:0A:F7:B4:E1:D1:7E
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285845777DC29F268F7904826E1880
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/06aed063-8d0a-3cff-9147-3992f5aa8b36.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     393398
IP address blocks:        96.47.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c2:9f:26:8f:79:04:82:6e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=0e931191-b9c4-4e06-87b0-d368692a89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:a3:59:af:ac:bb:68:f4:61:85:1d:0d:66:
                    83:e9:56:41:c3:81:09:c5:75:0d:89:6e:2e:67:4d:
                    52:91:e2:78:43:fc:34:d3:4b:e0:95:29:b1:66:50:
                    c2:e0:a8:0f:99:52:ad:ea:1e:ef:09:5c:2a:88:ec:
                    8e:c1:bd:9f:f5:f6:62:6a:05:86:5a:96:71:84:9d:
                    37:d4:78:8e:4b:12:62:22:06:69:b6:31:3b:99:99:
                    f3:7b:b2:e5:81:dd:24:e3:f3:aa:f3:68:df:52:b3:
                    32:28:34:da:71:2e:c2:a7:47:a1:b1:68:10:72:b6:
                    aa:d4:af:8f:ca:50:0d:03:46:bf:b5:57:42:77:e5:
                    5d:ed:5f:9a:56:7d:ce:a0:42:80:8e:ed:68:2e:27:
                    af:57:79:ec:88:0b:e8:02:e0:da:a6:23:91:b9:48:
                    27:0d:6d:08:fe:bb:94:e7:dd:e1:29:48:f2:a3:bb:
                    f3:51:73:b6:ba:54:6c:b1:fe:24:ab:50:d8:15:ee:
                    e6:dc:ce:3c:e0:9c:42:42:dc:03:9d:a7:4a:e9:25:
                    f8:84:af:66:d6:62:8a:ca:83:9a:e0:49:d7:e2:8d:
                    ee:40:8c:d3:e4:1c:d1:ae:3a:f7:13:f3:4f:05:22:
                    75:98:41:62:53:84:f7:7e:b0:8b:ed:7a:89:57:7c:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:FA:1E:4B:E8:4B:BA:7A:B5:4E:D2:91:6D:0A:F7:B4:E1:D1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/06aed063-8d0a-3cff-9147-3992f5aa8b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:6d:cf:fb:b3:63:d7:04:7d:68:99:36:9b:bb:a6:e1:ca:
         ae:42:f6:ec:b5:96:f4:22:82:f2:b0:40:91:8c:2f:b2:d3:31:
         d5:e1:49:d0:45:9c:b4:e2:98:c0:9c:d8:8b:39:33:c6:9a:3f:
         27:f5:45:a8:cb:ea:ca:6b:a9:75:3e:eb:98:fe:5b:f0:fd:87:
         ab:99:d8:0b:92:42:19:3d:53:5f:0b:e1:f0:e3:b8:c3:3b:50:
         cc:d3:5f:45:61:d8:5e:be:29:5d:7d:ec:15:d9:2e:64:37:ac:
         67:0f:f3:f0:53:dd:37:56:24:1a:bb:37:01:17:b6:11:45:fc:
         35:fc:3c:ab:54:69:4a:d8:87:a1:81:21:79:6a:a7:97:e9:98:
         5e:f3:7c:d5:dc:c3:44:72:ef:6c:cb:77:d5:bc:37:e4:9a:92:
         ca:2a:2a:97:fd:8a:17:0c:9a:86:67:e5:ba:6d:49:e9:65:ad:
         15:b9:43:fc:c8:c4:ed:9a:81:e0:dd:9b:17:9a:89:d3:f3:c7:
         91:5e:23:cb:f9:d2:3d:68:26:9f:14:c3:b5:6d:46:ec:06:72:
         fe:05:91:f0:a4:e8:58:68:08:ba:b6:2a:d8:1c:99:b1:cc:95:
         e8:88:4f:39:94:f5:2f:9c:24:a0:b7:35:c7:c2:07:62:23:44:
         87:b5:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:59 2024 by rpki-client on console-ams.rpki-client.org