Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/e198dbc9-7802-353f-b8db-42492cfb66e2.roa
File:                     e198dbc9-7802-353f-b8db-42492cfb66e2.roa (raw, json)
Hash identifier:          2jYa+zX9BhTmPaIrEZ99ynjW+Gix8WlSFwGeZoqpll4=
Subject key identifier:   8C:32:75:6C:5B:E6:97:D2:0A:F6:60:E8:7A:DB:CF:18:09:82:0B:7C
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285845777DC277095132BF1C8C8A00
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/e198dbc9-7802-353f-b8db-42492cfb66e2.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     393398
IP address blocks:        96.47.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c2:77:09:51:32:bf:1c:8c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=89d975d8-2f20-4d3f-a68a-28ffe9119d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:21:cc:ce:d6:f3:43:77:74:91:cd:80:06:
                    b4:a9:e2:b5:85:d6:0c:bd:5a:19:0a:aa:b3:30:54:
                    c9:59:15:df:61:ca:3c:a9:01:bf:3d:81:35:ee:d6:
                    49:52:c7:65:36:33:65:37:19:1b:b2:62:65:df:2f:
                    9c:f5:ab:2a:fc:b9:65:82:20:20:21:9d:0e:d3:d4:
                    b6:e1:16:f6:48:69:ff:26:9a:7a:ee:b4:46:69:c9:
                    7f:dd:f2:83:04:ec:d0:29:d8:52:7b:18:16:22:51:
                    f7:42:74:d4:ee:96:ac:08:07:a4:0b:81:78:38:ee:
                    08:37:e1:ed:f8:5a:97:14:3d:a3:1d:ce:07:ea:a3:
                    6e:ac:b0:93:e2:18:f6:80:ce:75:62:e5:fc:fd:69:
                    28:20:71:ff:b2:9d:97:db:71:89:46:81:51:90:28:
                    74:3b:ab:fd:2c:87:f1:6c:61:c8:9a:74:6c:e0:92:
                    9b:d0:d7:6a:d9:a1:16:d2:5f:eb:a7:42:53:9f:ab:
                    12:31:0b:79:3b:7c:90:9b:6e:47:86:6e:6d:1b:bd:
                    5d:3c:44:13:39:65:fd:c7:ac:21:b3:1a:24:d5:a5:
                    f5:cd:d3:a1:90:ba:32:cb:d7:21:09:be:01:99:5c:
                    77:c8:a3:83:15:f8:92:67:05:14:75:6d:01:5b:92:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:75:6C:5B:E6:97:D2:0A:F6:60:E8:7A:DB:CF:18:09:82:0B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/e198dbc9-7802-353f-b8db-42492cfb66e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:36:b5:2b:0a:72:bf:15:27:83:8b:56:68:fd:fe:b5:a1:
         96:fe:20:e0:9a:68:52:09:c3:ca:b3:e3:37:34:81:9e:77:f5:
         fc:22:00:71:31:b1:46:8b:8b:71:8d:73:42:28:84:72:b2:1e:
         db:33:b6:2b:52:36:3b:c4:5d:56:34:5e:27:69:41:3d:68:a3:
         7a:47:98:54:ae:0e:da:04:b9:cd:27:06:b6:1f:71:69:8f:47:
         91:c3:92:c7:ec:46:8a:b4:d4:fd:62:e4:b0:05:0d:30:49:bb:
         f7:5e:c9:9a:75:07:ea:b2:2b:96:11:72:26:58:9e:87:18:ba:
         94:e7:fe:d6:98:02:5d:37:fe:1e:b0:5a:86:31:b2:17:17:39:
         3d:c7:e4:06:94:3b:28:c0:d9:f2:82:ca:9a:b2:d2:0f:5b:3f:
         92:63:8f:0e:d1:7a:fa:00:80:d4:99:89:91:ec:dd:02:fb:20:
         3c:52:55:e0:67:4f:84:bf:65:7e:ba:62:6e:ac:a7:81:f5:00:
         64:6f:9e:44:fc:ef:ec:7e:c2:ca:e7:9b:2a:b7:b3:66:93:8f:
         9a:b2:7e:0a:9b:83:27:5b:ee:81:5b:ba:4c:b3:ea:30:2a:e2:
         3d:84:06:4e:06:f5:90:43:96:d1:c3:76:31:8e:3d:ff:58:e0:
         07:b1:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:59 2024 by rpki-client on console-ams.rpki-client.org