Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5596a832-ed50-3572-89f6-147071bf063e.roa
File:                     5596a832-ed50-3572-89f6-147071bf063e.roa (raw, json)
Hash identifier:          XX0Ac5/XumZ1ZtblzW+X0QhwM9XW0QYHDQ1uiEDFnD4=
Subject key identifier:   43:DD:AA:F7:BB:24:83:A9:B8:A6:48:B0:50:9E:CF:FD:92:A2:B5:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858384D0CACBB3916095BCF7E9E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5596a832-ed50-3572-89f6-147071bf063e.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Wed 09 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        96.41.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4d:0c:ac:bb:39:16:09:5b:cf:7e:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2026 GMT
        Subject: CN=36ad7f26-3322-4f2e-b788-0d5888b3bbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:18:2c:7c:a3:d8:4d:02:6b:59:f8:58:b9:
                    c2:38:10:22:c9:24:a1:2a:c2:a0:3e:34:50:81:b7:
                    9d:66:0b:89:1a:d6:79:aa:9e:0e:8e:3d:3c:51:7d:
                    95:71:2f:43:59:0e:e6:8c:7b:92:0d:90:db:dd:f5:
                    8d:4b:9f:9d:ba:b4:b9:5b:45:f5:fd:80:ca:bf:ff:
                    61:0a:31:f7:14:ad:c6:45:4f:bf:4a:0a:52:ec:bd:
                    f2:a9:9f:ea:98:75:15:d7:69:c7:88:07:69:02:51:
                    95:80:70:f9:f3:bf:d3:be:a6:99:a2:20:b7:1f:e6:
                    58:1c:ee:ce:9c:60:c4:dd:f7:a1:71:7a:4c:1b:8d:
                    5a:c2:45:e7:16:8d:14:46:20:ec:e4:7b:33:12:70:
                    6f:94:2b:b0:12:46:6c:8d:8d:61:d3:23:05:99:e3:
                    8c:7e:34:2c:d6:39:df:4b:e1:a2:2a:ca:5e:fa:28:
                    66:91:8f:a9:dd:5e:a9:c6:12:4d:b4:56:eb:74:93:
                    ea:b7:54:44:0d:05:b5:86:39:61:58:75:8e:51:d0:
                    0d:48:3a:01:6c:15:98:35:94:20:84:3a:fb:a5:37:
                    e2:58:1d:f5:28:92:b2:4e:32:ff:c2:32:eb:b0:11:
                    1c:76:e7:80:ac:bc:39:57:83:07:49:e0:1e:e0:f7:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:AA:F7:BB:24:83:A9:B8:A6:48:B0:50:9E:CF:FD:92:A2:B5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5596a832-ed50-3572-89f6-147071bf063e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:30:3e:0b:27:77:2e:12:af:b8:a3:ba:30:22:52:86:ca:
         2c:f2:51:03:72:d7:5d:dd:4b:52:68:0b:9b:cb:2a:af:1d:b4:
         79:20:04:27:e9:1d:20:5a:3f:bb:04:0a:5b:e4:48:fc:e6:48:
         dd:65:39:c0:1a:b5:6b:63:3b:be:03:da:01:ba:66:43:22:94:
         55:e5:b3:8d:88:ea:6f:8c:92:30:41:de:c4:93:db:3d:fa:d4:
         2a:f5:83:cf:77:67:b8:b1:1e:6c:fe:dd:82:6f:26:1d:e9:4b:
         cf:db:3d:4c:f2:29:da:51:f4:bf:a2:76:66:3b:05:a6:ef:01:
         b2:e4:d9:ea:73:ae:47:33:27:fd:7f:78:95:3c:33:57:d4:e0:
         62:75:3c:83:b7:82:db:37:a5:2b:e5:f5:8c:c0:c8:4e:64:b0:
         46:5b:ca:d6:06:75:2d:b2:b1:d7:71:1b:0f:df:c5:51:f1:28:
         23:74:ca:c5:50:49:31:25:6e:18:0e:71:90:84:ad:34:3a:e1:
         a1:bc:f7:fb:82:06:40:3f:dd:6a:d0:2f:eb:27:68:04:e3:f5:
         0a:01:a2:bf:7d:06:30:c4:97:e1:98:dc:0c:9f:b5:00:40:f9:
         09:52:e0:5c:e8:1e:14:df:4f:12:47:c3:14:9b:87:b4:51:0c:
         c7:03:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:18:49 2024 by rpki-client on console-ams.rpki-client.org