Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c78a0a5-8199-3d8d-839f-25dea97f1c2d.roa
File:                     1c78a0a5-8199-3d8d-839f-25dea97f1c2d.roa (raw, json)
Hash identifier:          cRQ4fF1icdaf28IXrZbQoRLpVyCKu9EiagcNkaTsNuM=
Subject key identifier:   AA:59:53:15:E5:01:E7:1A:5F:8B:43:87:A6:E0:68:9C:F7:B6:AB:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BCC028FAF753E23EA0640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c78a0a5-8199-3d8d-839f-25dea97f1c2d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33668
IP address blocks:        96.109.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:cc:02:8f:af:75:3e:23:ea:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=6bf37110-c8f1-4023-8d0b-9edd0faef3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:cb:97:f3:43:b6:3e:00:f8:b9:b8:ed:bc:
                    37:bd:b9:1f:9d:59:8e:70:a6:95:0f:fe:14:12:53:
                    78:fe:b8:d5:e3:38:92:d2:f9:79:58:9c:ca:56:ba:
                    25:33:1d:02:d3:e2:33:bb:7e:de:ca:9b:3f:a6:29:
                    ab:2b:4e:72:c9:39:2c:0d:7c:3f:45:07:1c:56:3e:
                    c7:83:34:be:c5:cd:c6:60:63:3c:5c:5b:4b:a2:55:
                    12:48:73:8a:1b:9f:ce:d8:e4:99:ba:ef:a9:bf:2b:
                    8d:01:bf:2c:f6:77:ba:72:83:25:45:3c:ed:e2:53:
                    6a:6b:6e:69:be:d1:a5:0d:31:88:cd:59:25:96:9c:
                    ed:72:66:fa:c8:27:be:07:3e:5f:91:f3:38:02:0d:
                    16:ca:5b:4c:79:36:9a:94:b1:d7:0b:86:89:2e:2a:
                    a3:76:86:2d:63:5d:92:ab:bf:80:59:44:b7:55:d2:
                    bb:9c:28:f7:4f:be:78:a4:5b:81:62:54:82:c0:a0:
                    5f:fd:cb:42:e9:d9:ed:bf:28:51:1e:6d:6d:74:4c:
                    21:3e:55:cb:e0:cf:bb:d2:7d:07:4b:af:13:f3:ae:
                    de:f7:88:86:2e:13:3a:7a:f3:64:8e:4f:8d:b0:6a:
                    bb:e6:3d:4a:2b:6f:ab:e0:fd:da:86:0f:1c:b2:7f:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:53:15:E5:01:E7:1A:5F:8B:43:87:A6:E0:68:9C:F7:B6:AB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c78a0a5-8199-3d8d-839f-25dea97f1c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:3b:09:2a:41:09:02:59:a8:7b:15:fb:1c:55:8e:ad:f6:e8:
         87:cb:89:f2:cd:76:f9:37:f9:b8:13:52:b2:06:a1:3d:da:97:
         54:cd:ad:1f:ef:8f:e4:14:64:e0:71:fe:ef:e3:fe:00:9b:7d:
         31:10:98:4c:51:74:28:e5:0c:36:d0:af:15:5a:82:a3:90:c4:
         e2:cf:b6:42:7f:b4:46:f2:cf:5e:29:c9:ae:33:13:f9:5f:fb:
         78:a6:14:f8:02:58:65:1e:aa:75:1f:05:5d:db:c2:bd:ea:e3:
         f1:d4:31:93:3b:e5:0d:bc:52:17:12:cc:05:2a:97:79:bc:27:
         f8:18:c6:a3:2d:1e:10:a1:10:e8:a6:ce:5d:8a:97:ae:2a:d6:
         4b:0c:4c:be:bb:f7:5b:d3:83:f1:34:ed:65:a6:8e:20:d0:e3:
         8d:99:35:38:bc:c3:e3:65:58:51:30:f5:80:3d:f2:1f:8d:14:
         73:b2:c6:86:89:f2:fb:3a:3e:d8:95:39:59:c8:84:dc:96:18:
         16:15:23:95:5b:a0:0f:c4:5f:82:2e:5a:9a:aa:25:aa:f7:ce:
         55:dc:f8:db:54:29:8f:c3:09:7d:27:d2:5a:c8:37:33:84:79:
         b8:32:4b:48:9e:5b:0b:69:37:a8:e4:7d:55:23:2f:e3:72:79:
         cc:f5:7a:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYAS8wCj691PiPqBkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
NmJmMzcxMTAtYzhmMS00MDIzLThkMGItOWVkZDBmYWVmM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/rLl/NDtj4A+Lm47bw3vbkfnVmOcKaVD/4U
ElN4/rjV4ziS0vl5WJzKVrolMx0C0+Izu37eyps/pimrK05yyTksDXw/RQccVj7H
gzS+xc3GYGM8XFtLolUSSHOKG5/O2OSZuu+pvyuNAb8s9ne6coMlRTzt4lNqa25p
vtGlDTGIzVkllpztcmb6yCe+Bz5fkfM4Ag0WyltMeTaalLHXC4aJLiqjdoYtY12S
q7+AWUS3VdK7nCj3T754pFuBYlSCwKBf/ctC6dntvyhRHm1tdEwhPlXL4M+70n0H
S68T867e94iGLhM6evNkjk+NsGq75j1KK2+r4P3ahg8csn+SGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpZUxXlAecaX4tDh6bgaJz3tquaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM3OGEwYTUtODE5OS0z
ZDhkLTgzOWYtMjVkZWE5N2YxYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYG0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANU7CSpBCQJZqHsV+xxVjq326IfLifLNdvk3+bgTUrIGoT3al1TNrR/v
j+QUZOBx/u/j/gCbfTEQmExRdCjlDDbQrxVagqOQxOLPtkJ/tEbyz14pya4zE/lf
+3imFPgCWGUeqnUfBV3bwr3q4/HUMZM75Q28UhcSzAUql3m8J/gYxqMtHhChEOim
zl2Kl64q1ksMTL6791vTg/E07WWmjiDQ442ZNTi8w+NlWFEw9YA98h+NFHOyxoaJ
8vs6PtiVOVnIhNyWGBYVI5VboA/EX4IuWpqqJar3zlXc+NtUKY/DCX0n0lrINzOE
ebgyS0ieWwtpN6jkfVUjL+Nyecz1enw=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:57:16 2024 by rpki-client on console-ams.rpki-client.org