Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
File:                     5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json)
Hash identifier:          Ouby2F5jmeeFxvsMMyYBVrlFX3NxiMBuamx5MzQZKiM=
Subject key identifier:   9F:DF:4B:E0:78:1D:25:58:47:2D:0B:29:5B:50:C0:68:A0:16:41:54
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F432858473D25E914FA5BDB8AE14C9200
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     393398
IP address blocks:        96.47.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e9:14:fa:5b:db:8a:e1:4c:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=e1c8d591-c225-4992-9b53-eabdb5c5c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:bf:6f:1d:0d:7e:fe:77:ef:87:46:88:8c:
                    75:97:44:b2:ac:d5:d8:76:e7:d4:55:13:18:bb:67:
                    e9:40:71:ee:b4:50:a2:ee:8a:4f:96:c0:9e:31:89:
                    6b:f3:d4:5c:a5:3c:62:e0:5d:a7:85:69:a0:e0:32:
                    bb:ca:97:4d:8b:22:78:25:99:c8:ab:7e:d0:8f:54:
                    65:31:03:66:13:a9:65:f7:52:9d:bd:b1:98:82:9d:
                    2a:d6:c6:a5:67:5e:0b:0f:5f:92:56:c7:76:15:c5:
                    f4:aa:6f:66:bf:4a:80:74:b0:11:fa:16:22:89:84:
                    39:78:54:41:f3:8a:ec:49:8e:f5:40:07:88:55:1f:
                    6f:af:2d:fe:8f:13:87:ff:b5:02:71:d3:7a:a5:5b:
                    b4:d0:70:2d:14:3a:f6:8c:78:bf:f3:29:10:f7:a7:
                    5c:0f:ce:16:a1:64:ce:16:8b:04:af:d4:3c:95:9f:
                    78:89:45:11:4a:4d:d8:7c:f0:52:a0:29:a3:d0:ad:
                    52:e2:b6:f9:ae:38:a8:4e:d6:a5:c8:50:fc:aa:ac:
                    f7:d0:fa:15:56:bd:67:ea:9c:ed:57:be:d5:78:9a:
                    b0:22:ff:f8:14:92:bf:e2:b0:5d:97:74:87:62:40:
                    80:b0:33:44:6b:e6:f6:71:11:ad:77:88:e1:04:8a:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:4B:E0:78:1D:25:58:47:2D:0B:29:5B:50:C0:68:A0:16:41:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:95:f7:ae:94:4c:ea:4e:b1:c2:b3:3d:69:be:76:cb:41:84:
         39:ea:cb:a8:67:26:1b:a8:9f:8e:01:a6:00:85:17:61:a1:97:
         4b:34:86:b0:ce:7d:fb:18:87:52:c5:29:54:8a:4a:3e:39:dd:
         06:9f:df:bc:4d:3a:eb:1d:f5:42:3c:e1:cd:51:85:97:b4:1a:
         b8:cf:ef:28:10:14:38:70:78:65:65:f4:c1:a0:fe:3b:c0:ce:
         0d:62:97:97:cc:ec:93:37:c0:3a:24:f0:48:ed:19:1f:b9:20:
         d2:6f:58:b9:c6:3f:35:86:97:fe:7b:6c:e7:c4:c9:74:e8:21:
         6a:06:0a:64:87:00:bb:17:03:a2:cd:f9:69:b5:4f:24:00:dc:
         8e:f1:e4:3c:ab:73:5d:f3:8d:49:9e:23:33:65:35:19:2d:80:
         54:71:8c:bc:e9:6a:1b:d7:41:05:79:42:68:a9:46:9e:fc:17:
         39:30:0b:fd:3b:b8:a4:0e:5f:c0:9a:dd:2c:33:a2:82:f9:b3:
         28:54:82:8c:1a:b1:4c:c1:1a:5b:da:0a:49:00:d0:55:f0:ea:
         8d:7f:1f:0b:8d:02:86:b8:46:88:06:5e:3b:14:df:d4:be:16:
         a9:3a:e4:3b:c3:8d:b3:ee:88:7d:7b:0d:c7:36:84:8a:5d:1b:
         fe:13:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org