Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa
File:                     55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa (raw, json)
Hash identifier:          MXJrS0s05uGMraPLei9nrdeki3XZfUaz0Q+bpcDjxfo=
Subject key identifier:   11:DA:DB:95:31:3C:1D:0F:18:A5:88:BD:31:D8:70:50:0E:E5:5B:2B
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F5CAA99A27F7A11F84EAFB00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        208.95.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a9:9a:27:f7:a1:1f:84:ea:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=d2feb7ae-33f9-422a-8ad3-88d379ab9c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:c7:c9:4d:ac:bc:c6:70:0f:e9:89:fa:c3:
                    7f:06:e8:5c:db:4d:f0:ff:37:fb:09:91:d8:28:66:
                    a8:c2:bc:32:e0:2a:7a:32:0b:90:6b:6c:64:23:15:
                    cf:95:ac:19:c9:81:d2:a5:fb:f9:1e:4b:58:1a:85:
                    c2:45:5f:2f:cb:d7:e6:4f:17:b6:ac:20:ec:26:22:
                    d5:26:a2:1b:31:09:d3:1a:03:66:15:11:90:3a:52:
                    46:d6:11:7b:bb:d8:04:0f:a8:d9:b1:4c:b1:0c:50:
                    0d:1b:90:94:1f:49:fb:63:94:64:2d:68:32:2f:16:
                    60:3a:94:1c:f3:54:9d:69:e4:02:8d:9d:b1:ab:93:
                    90:2d:ca:23:72:78:ba:97:e8:f3:86:bd:c0:58:a5:
                    76:5d:af:df:ce:45:88:62:e3:d0:d0:49:5e:e9:23:
                    fd:80:2e:82:98:72:93:63:95:33:c6:02:5b:75:68:
                    cc:74:61:e0:02:ba:b6:0c:61:e4:67:de:77:7e:69:
                    6b:1b:eb:21:d4:0b:4f:dd:be:d2:54:d6:21:87:90:
                    da:7c:f2:aa:b4:99:df:63:03:cf:ff:c7:23:f6:01:
                    ab:69:81:10:80:7e:24:e3:02:3c:70:50:71:f6:a1:
                    8d:26:a6:49:11:41:6b:95:4a:ad:a8:43:a1:7c:ec:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:DB:95:31:3C:1D:0F:18:A5:88:BD:31:D8:70:50:0E:E5:5B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:df:de:f0:29:0f:8f:97:a1:b8:25:c0:d9:e5:ef:3a:4d:59:
         08:8d:02:e7:77:0c:6c:21:42:52:b5:75:81:82:9c:8c:b6:30:
         17:f0:73:4a:98:b4:47:97:7b:1e:41:40:b4:f3:e6:0e:50:11:
         95:77:bd:00:ad:4e:fb:6a:0c:ee:b4:d6:1a:16:4f:86:9e:f0:
         7a:9e:60:75:e7:82:18:39:10:d9:45:c3:e0:3d:d0:9c:65:2a:
         07:46:03:70:2f:a0:2d:49:45:77:b8:8a:dd:ae:bf:ec:9d:82:
         38:01:a7:ef:40:18:f0:e6:8b:71:c2:94:69:c2:88:26:85:4f:
         c0:7b:78:50:1e:c7:7d:cd:c3:2b:87:22:a2:bd:8f:f1:1c:53:
         ca:89:4e:ff:be:fc:ba:03:19:cb:3b:9e:8e:70:3b:d1:c2:49:
         04:64:b7:c7:e5:e7:c1:a6:8a:e8:a4:c4:f9:52:22:00:59:d8:
         82:e5:8e:1f:9f:d8:fc:ad:57:8b:45:67:ca:a8:c2:c8:be:ba:
         ce:30:16:5a:df:72:45:fe:86:b4:e4:47:97:f6:47:1c:34:9f:
         96:b4:7c:ac:16:44:1b:bd:d0:0c:b0:68:7b:48:08:88:27:e0:
         7f:cd:1b:3c:8d:40:4e:c7:8d:8d:1c:a6:be:c4:0f:ed:67:ac:
         08:6b:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:56:02 2024 by rpki-client on console-fra.rpki-client.org