Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/7132f82d-374e-38c2-ad71-4145dc6231fd.roa
File:                     7132f82d-374e-38c2-ad71-4145dc6231fd.roa (raw, json)
Hash identifier:          azkWJ8XhEzLYosvP2+9x2G8GHmuS9UYSp+oBJcDVQr4=
Subject key identifier:   48:94:E5:27:6D:3C:E9:94:78:A1:A5:B5:25:06:E3:FF:ED:AF:F0:FF
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285845777DC260CC04FAAB62427300
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/7132f82d-374e-38c2-ad71-4145dc6231fd.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     393398
IP address blocks:        96.47.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c2:60:cc:04:fa:ab:62:42:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=1344d6fa-1a45-4649-a66a-f239c238ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:97:54:9e:74:b0:70:79:3e:12:ba:4c:6d:
                    34:75:23:21:e2:7a:b7:c9:28:bd:83:8e:9d:01:d3:
                    c3:31:ae:ce:2c:fc:15:4b:0a:ea:fc:6d:5f:29:ab:
                    bb:0a:c6:7b:d2:1c:c0:ec:b6:3b:f6:22:bf:4e:e2:
                    d4:c4:ec:47:83:2b:89:cf:f0:91:61:44:af:2b:06:
                    b8:5b:6f:f4:b4:ff:21:c5:5d:0a:18:11:56:68:7c:
                    25:9f:32:ed:60:33:8f:42:23:2b:38:ca:e8:cf:e7:
                    f2:47:7d:5c:df:63:ba:91:3b:33:45:6e:b0:1f:3b:
                    c0:7c:b7:2c:93:cc:e7:96:48:26:4f:14:0c:79:02:
                    b3:62:d0:90:b4:84:ae:6d:c8:3d:e4:67:7c:87:af:
                    59:a6:4c:82:69:d8:89:dc:d5:13:87:df:1e:8c:e8:
                    c6:16:d3:31:0a:7b:ab:db:d7:e6:63:1b:31:fc:dd:
                    96:c6:4f:36:4b:9b:07:d6:9e:42:21:fe:63:3f:de:
                    53:0e:e4:dd:25:21:d0:3a:02:14:af:6c:62:09:61:
                    21:48:bc:91:81:0b:bb:0a:60:f8:ba:14:59:4b:85:
                    f3:f4:e2:bc:ea:98:27:57:63:86:ec:cc:43:8a:fc:
                    e9:54:64:55:f4:55:75:43:9b:2c:20:43:ec:de:93:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:E5:27:6D:3C:E9:94:78:A1:A5:B5:25:06:E3:FF:ED:AF:F0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/7132f82d-374e-38c2-ad71-4145dc6231fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:a6:c0:9e:dd:e1:43:44:3c:78:d6:2d:ef:2d:1c:6e:b4:
         11:76:fd:f4:b9:e8:c5:6e:ec:14:3b:6d:4f:83:55:45:35:c5:
         02:8d:4f:48:91:3c:72:5a:80:8d:ba:d2:d2:bd:4d:38:02:97:
         05:a8:4c:0c:d2:6c:8f:ec:9a:d5:a3:47:be:79:fb:6e:a8:c9:
         52:1f:85:4d:5f:75:c3:4d:b2:e5:02:75:d3:6a:a4:21:65:57:
         98:2a:72:39:5e:63:9f:7a:5d:30:63:5e:43:e6:ce:1c:1c:ae:
         15:66:39:81:4d:c5:0e:c8:a8:08:87:56:5e:67:b7:4b:ac:11:
         5d:08:69:c8:8c:c4:15:1e:20:b7:fb:91:85:fb:49:2d:19:89:
         c3:76:d7:04:c7:8d:69:9f:15:d3:bc:43:db:75:a4:50:b5:b0:
         83:31:b1:3d:f9:ac:0b:12:07:f3:08:0b:3e:05:e3:39:67:b3:
         d7:91:48:9d:5a:34:17:1f:6d:3a:04:d2:d9:b1:9b:3d:98:83:
         90:64:ce:56:3e:87:12:ac:f2:0e:39:b5:26:da:19:2c:35:e9:
         28:1f:ed:b6:78:42:86:b1:fc:30:30:66:d1:65:c0:fb:fa:82:
         4e:77:4c:64:a5:6a:72:86:e1:a4:8e:57:db:c3:e5:70:13:38:
         4d:f6:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:59 2024 by rpki-client on console-ams.rpki-client.org