Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e29947bf-55a1-3ca2-8208-b846343c1da0.roa
File:                     e29947bf-55a1-3ca2-8208-b846343c1da0.roa (raw, json)
Hash identifier:          KKM36obrzrGykC7T8UalbM0EOILzdNdYQtpMzzcakW0=
Subject key identifier:   68:52:78:F2:20:BB:71:93:E9:CB:A3:34:93:BD:F7:13:E0:02:38:76
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845E193D0B658E614C50568E400
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e29947bf-55a1-3ca2-8208-b846343c1da0.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     46275
IP address blocks:        96.126.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d0:b6:58:e6:14:c5:05:68:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=d8aafab3-535d-4243-8ad1-645aab742e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:85:7c:1c:7f:71:24:0c:52:46:f3:28:d9:
                    78:3f:e6:bb:c8:28:da:f1:60:dc:54:3f:75:d4:bd:
                    6d:f3:36:ad:93:5f:f7:01:3d:7b:fb:9d:dc:fb:a2:
                    31:f8:c7:16:af:ae:75:f1:05:8d:b3:ba:a0:87:6e:
                    3b:5e:13:92:ea:9c:6d:dc:02:57:f6:a5:b0:40:03:
                    2c:b7:d0:7f:52:ee:fa:28:61:47:7f:93:4f:25:49:
                    4f:87:ce:72:8b:1e:65:fb:05:83:98:b3:23:82:54:
                    82:9d:eb:1b:9f:98:34:11:07:f0:40:c6:cc:a3:49:
                    e5:08:b6:5f:18:13:5e:a5:94:d3:88:1c:9f:53:24:
                    21:ad:96:89:f8:cb:b6:d8:be:bf:0d:a4:22:f7:3f:
                    ac:eb:6d:d1:a3:87:81:00:2f:d9:71:67:2c:99:2a:
                    5b:6a:a0:f3:28:30:9c:7b:c3:8d:15:d6:88:ac:95:
                    ce:33:2c:2d:ad:0d:00:cc:96:13:09:a1:7b:4f:65:
                    db:cf:84:b4:f2:1d:23:51:a1:fc:28:ef:d2:7c:ea:
                    7f:eb:33:18:c8:3f:3c:dc:24:93:c7:76:f4:43:23:
                    2f:9f:b1:fd:cb:35:dd:e6:38:35:44:d0:2d:fd:0b:
                    58:1c:cf:30:0f:91:6c:63:0c:24:98:6f:1e:d4:b9:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:52:78:F2:20:BB:71:93:E9:CB:A3:34:93:BD:F7:13:E0:02:38:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e29947bf-55a1-3ca2-8208-b846343c1da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:f4:f5:09:8d:4f:15:d6:0a:03:5f:52:4e:a7:87:23:7f:
         98:1c:ad:97:0f:b0:3e:aa:d6:1d:2f:85:aa:ba:30:68:f4:bd:
         f9:7c:31:dc:0b:7f:4e:79:ef:2e:68:05:0b:03:0f:70:c9:75:
         dc:8f:83:6b:07:f8:7a:d0:fd:1f:fd:6c:f0:20:34:63:62:7a:
         a1:ec:fd:98:9a:da:a3:32:35:56:e3:bd:24:d2:a8:e3:32:dd:
         ed:1c:1a:a0:7b:0e:ba:85:17:68:90:a6:95:00:cc:b2:a1:14:
         3d:0f:5e:d1:89:c4:03:f2:f4:fe:d7:86:97:be:e2:c7:3c:42:
         99:d6:23:c0:60:ea:a4:2c:91:f9:1c:bb:08:ed:a0:cb:2a:95:
         73:a5:96:fd:8f:5c:b8:6c:10:8b:c8:78:36:e4:68:12:33:91:
         15:90:16:11:44:be:f2:74:cb:6e:f4:56:d4:e8:51:2c:00:38:
         49:57:83:03:38:9a:ee:59:68:4a:5b:c7:3d:07:1a:46:a4:4c:
         e2:df:d1:4e:db:51:9b:6d:3a:82:73:61:11:36:9e:95:22:93:
         5c:21:bf:82:68:7f:b5:96:7d:cb:66:4f:06:83:55:ee:d6:cb:
         a8:41:c6:8f:36:d1:e8:90:04:dd:45:24:ef:95:0c:a7:c9:e3:
         9f:56:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:23 2024 by rpki-client on console-fra.rpki-client.org