Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa
File:                     3de75213-8d88-3eed-9106-dbbb38bc2c18.roa (raw, json)
Hash identifier:          WwodjnJDPPEvnBGb2LhyW/aNHunRrP1MDk3r7qHB2RA=
Subject key identifier:   33:59:37:88:64:04:64:82:A0:A5:EB:A0:0F:56:31:8E:C7:DE:4D:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A2E4B5542F5B248F6600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        96.255.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a2:e4:b5:54:2f:5b:24:8f:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=7efeb960-3604-4529-b643-343ec5a52922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:b1:de:ff:5a:db:21:27:e1:ec:4c:c3:c1:
                    14:02:81:db:e5:fe:48:a9:6f:f6:5f:c0:19:6f:2c:
                    bf:86:74:e4:d6:08:44:90:e0:67:35:81:a7:73:50:
                    cd:76:59:8a:13:3a:5f:fd:9e:8b:45:d6:7e:d8:f3:
                    01:76:3f:89:cb:ca:9e:b9:5c:77:36:c9:50:9c:ac:
                    e5:ca:7a:44:b4:16:48:d2:d9:d8:63:60:ea:c3:4a:
                    b9:3e:95:5d:32:50:d7:01:98:97:00:35:90:a2:ee:
                    e6:df:61:ba:c1:31:ae:fd:3a:0e:39:8e:39:7d:d1:
                    a2:c3:d3:29:85:76:2a:d8:73:c2:1d:56:0e:28:5a:
                    13:9f:15:8a:35:c2:4f:54:f7:56:35:1f:3b:1a:9f:
                    07:93:b5:30:f0:ac:2e:92:17:cb:f4:42:4f:b1:ab:
                    0a:c3:62:cb:51:ea:ce:28:ed:d3:ce:dc:7c:c0:b2:
                    07:1b:c3:66:ea:26:aa:58:5d:e5:8a:d2:3e:1e:f2:
                    da:cd:ed:3e:87:8b:02:35:6f:37:6e:97:87:d4:82:
                    ae:2b:c2:1e:88:16:71:94:66:9a:92:e3:c8:a2:56:
                    a4:ac:dc:c1:83:1d:f5:66:a3:2e:f6:e1:f6:ba:fd:
                    39:cf:29:9e:5f:91:f3:61:d9:a3:b6:24:c8:82:2c:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:37:88:64:04:64:82:A0:A5:EB:A0:0F:56:31:8E:C7:DE:4D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f4:87:66:c3:57:6e:30:ce:f3:c9:a0:d7:cd:d0:f4:f7:80:
         e8:e8:03:26:d0:3e:ad:fb:c5:7d:24:c1:4e:c6:8d:5d:e5:c2:
         e0:ed:e8:29:23:29:38:ef:b5:93:ee:b1:bc:44:53:2e:0a:05:
         de:75:70:cd:30:1e:c5:f7:8f:9a:c4:ad:e9:e8:a3:12:7d:21:
         bc:7f:b6:31:cf:e9:4f:82:a1:bb:95:0a:51:90:b0:d7:1f:a3:
         72:e2:3b:0d:ef:9c:95:a8:43:89:6d:e9:92:a5:e1:da:7e:d4:
         ca:fe:9f:55:77:7e:e0:99:10:04:59:24:33:84:9b:d7:b5:b1:
         0d:a7:19:da:8b:73:00:16:64:c6:67:db:45:89:20:0e:fa:79:
         88:da:bd:70:1f:23:38:e9:84:4d:43:83:3f:25:c4:45:e6:5c:
         2d:f7:24:c6:97:d1:09:ca:92:de:18:5d:7a:cf:03:32:8f:bc:
         c4:14:52:73:aa:dd:2a:92:86:b6:a3:38:ff:51:d8:cb:49:9a:
         d0:0f:55:44:9a:70:74:a9:af:9e:bd:e8:6b:fd:e0:fc:69:da:
         59:5d:ea:5b:f3:de:3b:ad:a6:f6:33:cb:16:99:6a:98:7f:e7:
         9c:32:cc:e6:a1:58:27:2a:13:6a:84:08:06:80:c1:4b:45:39:
         7b:2e:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:21 2024 by rpki-client on console-fra.rpki-client.org